{"action":"opened","issue":{"url":"https://api.github.com/repos/sparkle-project/Sparkle/issues/546","labels_url":"https://api.github.com/repos/sparkle-project/Sparkle/issues/546/labels{/name}","comments_url":"https://api.github.com/repos/sparkle-project/Sparkle/issues/546/comments","events_url":"https://api.github.com/repos/sparkle-project/Sparkle/issues/546/events","html_url":"https://github.com/sparkle-project/Sparkle/issues/546","id":77616995,"number":546,"title":"Move Autoupdate.app out of Resources","user":{"login":"zorgiepoo","id":857267,"avatar_url":"https://avatars.githubusercontent.com/u/857267?v=3","gravatar_id":"","url":"https://api.github.com/users/zorgiepoo","html_url":"https://github.com/zorgiepoo","followers_url":"https://api.github.com/users/zorgiepoo/followers","following_url":"https://api.github.com/users/zorgiepoo/following{/other_user}","gists_url":"https://api.github.com/users/zorgiepoo/gists{/gist_id}","starred_url":"https://api.github.com/users/zorgiepoo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zorgiepoo/subscriptions","organizations_url":"https://api.github.com/users/zorgiepoo/orgs","repos_url":"https://api.github.com/users/zorgiepoo/repos","events_url":"https://api.github.com/users/zorgiepoo/events{/privacy}","received_events_url":"https://api.github.com/users/zorgiepoo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-05-18T11:24:48Z","updated_at":"2015-05-18T11:24:48Z","closed_at":null,"body":"Helper Apps are not supposed to be in Resources. As it is currently, Autoupdate.app is in Resources and it can't or shouldn't be signed because it's in a directory that isn't supposed to contain signed files. It should be moved into the Executables directory or a Helpers directory according to the code signing guide. The former should be easier because Xcode doesn't provide a UI option for the latter.\r\n\r\nAfter it's moved out to another location, the code that finds the Autoupdate.app path needs to slightly change. Then Sparkle being added to a new project that code signs Sparkle on copy needs to be tested, and verified that Autoupdate.app along with Sparkle's executable are both signed.\r\n\r\nI would submit a pull request for this, but I've not had much luck with the last step because either something is screwed up with the project or I ran into an issue I didn't know how to resolve."}}