If you see the error "Bazaar" is damaged and can't be opened. You should move it to the Bin. when trying to install Bazaar on macOS, this is due to macOS Gatekeeper security. Here's how to fix it:
-
Download the DMG or ZIP file from the GitHub releases page
-
Open Terminal (Press
Cmd + Space, type "Terminal", press Enter) -
Remove the quarantine attribute by running one of these commands:
If you downloaded a DMG file:
# First, mount the DMG and copy the app to Applications # Then run: xattr -cr /Applications/Bazaar.app
If you downloaded a ZIP file:
# Navigate to where you extracted the ZIP cd ~/Downloads # or wherever you extracted it xattr -cr Bazaar.app
-
Open the app - You should now be able to open Bazaar normally
- Right-click (or Control+Click) on the Bazaar.app file
- Select "Open" from the context menu
- Click "Open" in the security dialog that appears
- The app will be added to your security exceptions and will open normally in the future
macOS Gatekeeper blocks unsigned applications by default. When you download an app from the internet, macOS adds a "quarantine" attribute to prevent it from running until you explicitly allow it.
The xattr -cr command removes this quarantine attribute, allowing the app to run.
To avoid this issue for end users, the app needs to be:
- Code signed with an Apple Developer certificate
- Notarized by Apple
If you're a developer and want to set up code signing, see the Code Signing Setup Guide below.
To sign and notarize macOS builds, you need:
- Apple Developer Account ($99/year)
- Developer ID Application Certificate
- App-specific password for notarization
- Go to Apple Developer Portal
- Navigate to Certificates, Identifiers & Profiles
- Create a Developer ID Application certificate
- Download the certificate and export it as a
.p12file
Add these secrets to your GitHub repository:
APPLE_ID: Your Apple ID emailAPPLE_ID_PASS: App-specific password (create at appleid.apple.com)APPLE_TEAM_ID: Your Team ID (found in Apple Developer Portal)APPLE_CERTIFICATE: Base64-encoded.p12certificate fileAPPLE_CERTIFICATE_PASSWORD: Password for the.p12fileAPPLE_KEYCHAIN_PASSWORD: Temporary password for the keychain (can be any secure password)
To encode your certificate:
base64 -i YourCertificate.p12 -o certificate_base64.txtCopy the contents of certificate_base64.txt and paste it into the APPLE_CERTIFICATE secret.
The build configuration already supports code signing. When the secrets are configured, the build will automatically sign and notarize the app.
Push a tag or trigger the workflow manually. The build will:
- Sign the app with your certificate
- Notarize it with Apple
- Create a properly signed DMG/ZIP that users can install without issues
- Make sure you ran
xattr -cron the actual.appfile, not the DMG - Try moving the app to
/Applicationsfirst, then run the command - Check if macOS is blocking it in System Preferences > Security & Privacy
- DMG files need to be mounted (double-click the DMG)
- Then drag Bazaar.app to your Applications folder
- ZIP files need to be extracted first (double-click the ZIP)
- Check System Preferences > Security & Privacy for any blocked apps
- Try right-clicking and selecting "Open" instead
- Make sure you're running macOS 10.13 or later
The "damaged" error is macOS protecting you from potentially unsafe software. Only download Bazaar from the official GitHub releases page: https://github.com/akulsr0/bazaar/releases