Update README for secure macOS releases

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
This commit is contained in:
Dan Luhring 2020-11-06 13:40:31 -05:00
parent c878cc361c
commit 501870f89f
No known key found for this signature in database
GPG Key ID: 9CEE23D079426CEF

View File

@ -54,7 +54,7 @@ Where the `format`s available are:
## Installation ## Installation
**Recommended** **Recommended (macOS and Linux)**
```bash ```bash
# install the latest version to /usr/local/bin # install the latest version to /usr/local/bin
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
@ -63,17 +63,12 @@ curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b <SOME_BIN_PATH> <RELEASE_VERSION> curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b <SOME_BIN_PATH> <RELEASE_VERSION>
``` ```
**macOS** **Homebrew (macOS)**
```bash ```bash
brew tap anchore/syft brew tap anchore/syft
brew install syft brew install syft
``` ```
You may experience a "macOS cannot verify app is free from malware" error upon running Syft because it is not yet signed and notarized. You can override this using `xattr`.
```bash
xattr -rd com.apple.quarantine syft
```
## Configuration ## Configuration
Configuration search paths: Configuration search paths: