docker-index macOS Monterey not signed

[rcollette]

I am not able to run docker-index. I am getting the following error.

“docker-index” cannot be opened because it is from an unidentified developer.

[patatman]

I'm having the same issue. Can't seem to run it out of the box.
You can disable this behaviour by running:
xattr -dr com.apple.quarantine docker-index

This removes the file attribute, and allow you to run the tool.
For more information: https://apple.stackexchange.com/questions/202169/how-can-i-open-an-app-from-an-unidentified-developer-without-using-the-gui

[cdupuis]

@rcollette given this tools is still early in its development, we are currently not planning on signing it. Eventually this will come of course.

To still be able to run this on Mac OS I see 3 possible approaches:

• Clone the repository and build from source. There there is a Taskfile.yaml and the command would be task go:install
• Run the tool from a Docker container like docker run -it ghcr.io/docker/docker-index:main cve -i node:latest DSA-2022-0001
• Disable the Apple security check for this tool as per @patatman