Thanks for being a part of WWDC25!

How did we do? We’d love to know your thoughts on this year’s conference. Take the survey here

macOS Malware Warning Despite Successful Notarization Validation

Hello,

I recently had my Electron app notarized by Apple and then performed the following steps:

Stapling the Notarization Ticket:

xcrun stapler staple "appPath/Aiparalegal.app"

Zipping the App for Distribution:

ditto -c -k --keepParent "appPath/Aiparalegal.app" theAIParalegal.zip

However, after unzipping and attempting to launch the app, macOS displays the following message:

Apple could not verify "theAIParalegal" is free of malware that may harm your Mac or compromise your privacy.

Yet, when I run validation using:

xcrun stapler validate "theAIParalegal.app"

I receive confirmation:

The validate action worked!
spctl -a -vvv -t install "theAIParalegal.app"
theAIParalegal.app: accepted
source=Notarized Developer ID
origin=Developer ID Application: NIPartnership LLC (M92N2796Q9)

Could you help me understand why the notarization validation appears successful, yet macOS still displays this security warning? Any advice on how to resolve this would be greatly appreciated.

Thank you!

Answered by DTS Engineer in 835397022

This is a relatively common problem. Successful notarisation does not mean that you’ll necessarily pass Gatekeeper.

I have a bunch of suggestions for how to investigate this in Resolving Trusted Execution Problems. However, the #1 cause of this — and by a country mile! — is a dangling load command path. See Resolving Gatekeeper Problems Caused by Dangling Load Command Paths.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

This is a relatively common problem. Successful notarisation does not mean that you’ll necessarily pass Gatekeeper.

I have a bunch of suggestions for how to investigate this in Resolving Trusted Execution Problems. However, the #1 cause of this — and by a country mile! — is a dangling load command path. See Resolving Gatekeeper Problems Caused by Dangling Load Command Paths.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

macOS Malware Warning Despite Successful Notarization Validation
 
 
Q