Issue Station
Sign In
Tools hereToolbox

codex - 💡(How to fix) Fix CLI binary releases not notarized — blocks Homebrew Cask distribution

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

Code Example

$ codesign -vvv codex-aarch64-apple-darwin
codex-aarch64-apple-darwin: valid on disk
codex-aarch64-apple-darwin: satisfies its Designated Requirement

$ spctl --assess --verbose=4 codex-aarch64-apple-darwin
codex-aarch64-apple-darwin: rejected
source=Unnotarized Developer ID

---

brew audit --cask codex:
  Signature verification failed:
    test-requirement: code failed to satisfy specified code requirement(s)

    The homebrew/cask tap requires all casks to be signed and notarized by Apple.
RAW_BUFFERClick to expand / collapse

The codex CLI macOS binaries in GitHub releases are code-signed with Developer ID (OpenAI OpCo, LLC / 2DC432GLL2) but not notarized with Apple.

$ codesign -vvv codex-aarch64-apple-darwin
codex-aarch64-apple-darwin: valid on disk
codex-aarch64-apple-darwin: satisfies its Designated Requirement

$ spctl --assess --verbose=4 codex-aarch64-apple-darwin
codex-aarch64-apple-darwin: rejected
source=Unnotarized Developer ID

This blocks Homebrew Cask distribution — the tap requires all casks to be signed and notarized:

brew audit --cask codex:
  Signature verification failed:
    test-requirement: code failed to satisfy specified code requirement(s)

    The homebrew/cask tap requires all casks to be signed and notarized by Apple.

Ref: https://github.com/Homebrew/homebrew-cask/pull/264918

Ask: Add xcrun notarytool submit + stapling to the macOS release CI pipeline.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#ssr#cache issue#memory leak#API versioning#request timeout

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

codex - 💡(How to fix) Fix CLI binary releases not notarized — blocks Homebrew Cask distribution