[macOS] Dev binary files stockfish-macos-m1-apple-silicon can't be executed

[PedanticHacker]

Describe the issue

All dev binary files for macOS (i.e., stockfish-macos-m1-apple-silicon) are flat out rejected by macOS and can't be executed, because the OS isn't able to verify their digital signature, since they don't have any.

The binary files for macOS of Stockfish's final release versions (like 16, 16.1, 17) work fine, since they include a digital signature, but those dev versions of binary files don't have a digital signature and are thus blocked by macOS, even if the com.apple.quarantine extended attribute of the file is removed. It also doesn't help if a binary file is made executable, even if it is already, but just to be sure.

Expected behavior

I expect all dev binary files for macOS to be executable.

Steps to reproduce

1. Download this Stockfish dev binary file for a Silicon-based Mac
2. Unpack the downloaded TAR file
3. Double-click the stockfish-macos-m1-apple-silicon binary file, found in the stockfish-macos-m1-apple-silicon/stockfish directory
4. You will get a warning message, and all you can do is put the file in the Trash

Anything else?

I haven't been able to test the Intel-based versions of Stockfish dev binary files, because I only have a Silicon-based Mac. I imagine the issue would be the same.

At compile time, all those binary files for Intel-based and Silicon-based Macs should get a digital signature, even if they are just development versions of Stockfish. This will certainly solve the issue, but I hope it is doable.

Operating system

MacOS

Stockfish version

All dev binary files for macOS

[Disservin]

They actually don't include a signature from us directly, neither do windows binaries btw.

The reason that the releases binaries work is that probably those binaries were whitelisted from someone at Microsoft/Apple.

[Disservin]

Currently you'd have to whitelist them yourself

https://apple.stackexchange.com/questions/441286/the-malicious-software-warning-when-running-an-app-whitelist-multiple-files-si

[AryanTah2005]

For this issue, you have to go to privacy and settings and allow the unix file to be executed. Click on allow, and then once you run the unix file the first time or call it in a program, it's gonna give you an option saying run anyway or cancel. Click on run anyway and you should be able to run every single time whenever you run your program and call the unix file.