index-cli-plugin icon indicating copy to clipboard operation
index-cli-plugin copied to clipboard

docker-index macOS Monterey not signed

Open rcollette opened this issue 3 years ago • 2 comments

I am not able to run docker-index. I am getting the following error.

“docker-index” cannot be opened because it is from an unidentified developer.

rcollette avatar Oct 28 '22 16:10 rcollette

I'm having the same issue. Can't seem to run it out of the box. You can disable this behaviour by running: xattr -dr com.apple.quarantine docker-index

This removes the file attribute, and allow you to run the tool. For more information: https://apple.stackexchange.com/questions/202169/how-can-i-open-an-app-from-an-unidentified-developer-without-using-the-gui

patatman avatar Oct 30 '22 19:10 patatman

@rcollette given this tools is still early in its development, we are currently not planning on signing it. Eventually this will come of course.

To still be able to run this on Mac OS I see 3 possible approaches:

  • Clone the repository and build from source. There there is a Taskfile.yaml and the command would be task go:install
  • Run the tool from a Docker container like docker run -it ghcr.io/docker/docker-index:main cve -i node:latest DSA-2022-0001
  • Disable the Apple security check for this tool as per @patatman

cdupuis avatar Nov 02 '22 10:11 cdupuis