@jgstew commented on GitHub:
Also, part of my reason for this issue was to get the answer, but also to update the documentation to reflect the answer. Thanks for taking the time to answer this…
@scriptingosx commented on GitHub:
Yes, the software will be downloaded anyway and installed over the existing installation.
(Exceptions are the applications that have an updateTool, see…
@scriptingosx commented on GitHub:
yes, @mischavdbent noticed this, too. Right now I am not sure how to extend the spctl check to work with Apple certs.
We could change the check to "just"…
@scriptingosx commented on GitHub:
fixed in e4e9aec0e2d39ee8cd148305dd4e52e7b913420f
@kenchan0130 commented on GitHub:
pkgutil can show some certificates.
$ pkgutil --check-signature "SF Symbols.pkg"
Package "SF Symbols.pkg":
Status: signed Apple Software
…
@scriptingosx commented on GitHub:
Since the Apple signed pkg passes the spctl check, I think it would be sufficient to check for the Apple Software label when the TeamID can't be found.
@Theile commented on GitHub:
I'm brainstorming. If it's as easy as Signal, that could be implemented and matched. If it's more difficult, the "new" version could be downloaded, and before copying…
@scriptingosx commented on GitHub:
I am also not convinced that all clients pinging multiple random web servers every day is the best approach
@scriptingosx commented on GitHub:
With some apps it is fairly easy to determine the latest version. With others: not so easy or even impossible. It would sure be nice, where possible. But I am…
@kenchan0130 commented on GitHub:
Since the Apple signed pkg passes the spctl check, I think it would be sufficient to check for the Apple Software label when the TeamID can't be found.
Looks…
@kenchan0130 commented on GitHub:
The certificate of Software Update details:
Subject Name
Common Name: Software Update
Organization: Apple Inc.
Country of Region: US
##…
@scriptingosx commented on GitHub:
I think want to move away from mdfind to determine the version number.
@scriptingosx commented on GitHub:
added a delay before reading the new version, fixed in e4e9aec0e2d39ee8cd148305dd4e52e7b913420f