主题： code-signing

• Verifying that macOS software is signed, notarized and unmodified: spctl, codesign, stapler

  Before running software obtained outside the App Store, spctl, codesign and xcrun stapler confirm it is code-signed, notarized by Apple, and unmodified since signing. Purely defensive verification: nothing here disables or bypasses these checks on software you do not trust.

  methodology · en · reviewed · 知识截至 2026-09-24

机器可读： JSON