Repository navigation
macOS malware/Gatekeeper warning appears after Codex app update; codesign verification fails #30972
Description
What happened
After updating the Codex macOS app and restarting it, macOS showed a malware/Gatekeeper-style warning for Codex again.
This warning had previously appeared repeatedly during normal use. A normal restart did not fix it. It seemed to stop after a macOS update and reinstall, but it reappeared after the latest Codex app update.
Environment
- macOS: 26.5.2 (25F84)
- SIP: Enabled
- Codex app: 26.623.101652
- Bundled CLI: codex-cli 0.142.5
- App path:
/Applications/Codex.app - Architecture reported by codesign: arm64
Diagnostics
Running:
codesign --verify --deep --strict --verbose=4 /Applications/Codex.appreturns:
/Applications/Codex.app: invalid signature (code or signature have been modified)
In architecture: arm64
Running:
spctl --assess --type execute -vv /Applications/Codex.appreturns:
/Applications/Codex.app: internal error in Code Signing subsystem
Running:
codesign -dv --verbose=4 /Applications/Codex.appshows:
Executable=/Applications/Codex.app/Contents/MacOS/Codex
Identifier=com.openai.codex
Format=app bundle with Mach-O thin (arm64)
TeamIdentifier=2DC432GLL2
Notarization Ticket=stapled
Authority=(unavailable)
Runtime Version=26.0.0
Sealed Resources version=2 rules=13 files=8506
Expected behavior
Codex should update and relaunch without macOS showing malware/Gatekeeper warnings, and the installed app should pass normal macOS signature/Gatekeeper verification.
Actual behavior
After the Codex update, macOS showed the warning again and local verification reports an invalid signature.
Notes
I can provide screenshots and logs from ~/Library/Logs/com.openai.codex/ if helpful.
Activity
github-actions commentedon Jul 3, 2026
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
dgobaud commentedon Jul 6, 2026
related / duplicate with additional info maybe - #31251
vanphongkoriuniform-dot commentedon Jul 11, 2026
I can confirm this issue on an Intel Mac.
Environment
The previous Intel Codex Desktop build worked normally until July 10.
After the recent security credential rotation, macOS now displays:
I verified the installer:
codesign:
Identifier=com.openai.codex
Format=app bundle with Mach-O thin (x86_64)
TeamIdentifier=2DC432GLL2
Gatekeeper:
CSSMERR_TP_CERT_REVOKED
The DMG mounts successfully and Codex.app is present inside the installer.
This appears to be the same issue caused by the revoked signing certificate.
One additional concern is that the latest ChatGPT Desktop does not support Intel Macs, so Intel users currently have no working desktop upgrade path.
Please let me know if you need any additional logs or if I can help test a newly signed Intel build.