Gitup: Catalina alerts user to "malicious software" and can't directly open

[lucasderraugh]

I think we'll need to send through Hardening and/or Notarization before release.

[hooch]

How can I download 1.1? I can't seem to find a link.

[lucasderraugh]

@hooch There is no 1.1, the server only keeps the latest copy, which is 1.1.1 at present. You can always download the latest at gitup.co (link also in ReadMe). If you're stuck on this warning, you can right-click and hold down option key while hitting the "Open" menu item. You can also go into "Security & Privacy" in System Preferences and open it there after your first attempt.

[hooch]

Thanks Lucas I dug build 1033 out of the trash. What's involved with getting Gitup notarised properly?

[lucasderraugh]

@hooch I need to update the script @swisspol originally gave me to send the binary to apple and get a notary receipt and staple it to the binary. See this support doc. I find this article much more concise though.
One main thing that needs to happen though is the app needs to adopt the Hardened Runtime requirements. I don't think we'll have any issue with this, though I haven't tried. This task could be a separate PR.

[hooch]

@lucasderraugh this appears to be resolved in 1.1.2? Thank you!

[lucasderraugh]

Nah, it’s still an issue on the first install. Updates via Sparkle are unaffected.

[saltcedar]

I encountered the same problem now. Would prefer not to work-around Apple security, since I'm quite a novice at this stuff. Looking forward to a fix.

[lucasderraugh]

Alright, finally figured out how to get our build to pass with hardening (make sure the xcconfig doesn't affect iOS). Hopefully with the next release I'll be able to send the app through notarization and we'll be on our way!

[lucasderraugh]

Hmm, looks like there could be some Sparkle hurdles here as well. I'll keep working through this over time. I'd like to cut a new build for continuous this weekend so depending on the time I get we'll see how that will shape up.

[lucasderraugh]

Alrighty folks, this should be resolved in the latest continuous release. This should land in stable in a few days assuming no major issues occur in the 1.1.3 build. If anyone can verify that either hasn't installed GitUp or wants to download it to a new user/computer, you can download the continuous build here: https://s3-us-west-2.amazonaws.com/gitup-builds/continuous/GitUp.zip

[frankrausch]

I can confirm that GitUp 1.1.3 (1036) from the continuous build link above opens correctly and without a notarization warning on a freshly installed macOS 10.15.4. 🎉
Thanks a lot! Great work.