Error map

Apple could not verify "x" is free of malware macOS: “app” cannot be opened because Apple cannot check it for malicious software / Apple could not verify “app” is free of malware that may harm your Mac

macOS · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Apple could not verify "x" is free of malware — macOS: “app” cannot be opened because Apple cannot check it for malicious software / Apple could not verify “app” is free of malware that may harm your Mac (macOS)Apple could…is damaged and can’t be opened — macOS: “App” is damaged and can’t be opened. You should move it to the Trash. (macOS)is damaged and can’…REMOTE HOST IDENTIFICATION HAS CHANGED — WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed) (Linux)REMOTE HOST IDENTIF…NO_PUBKEY — The following signatures couldn't be verified because the public key is not available: NO_PUBKEY (Linux)NO_PUBKEY"x" can't be opened because it is from an unidentified developer — macOS: “app” can’t be opened because it is from an unidentified developer (macOS)"x" can't be opened…codesign: resource fork, Finder information, or similar detritus not allowed — macOS: Error: resource fork, Finder information, or similar detritus not allowed (macOS)codesign: resource …Homebrew Cask: It seems there is already an App at — Homebrew: Error: It seems there is already an App at '/Applications/Chrome.app' (macOS)Homebrew Cask: It s…zsh: bad CPU type in executable — macOS (Apple Silicon): zsh: bad CPU type in executable: ./tool (macOS)zsh: bad CPU type i…The specified item could not be found in the keychain (-25300) — macOS: security: SecKeychainSearchCopyNext: The specified item could not be found in the keychain. (errSecItemNotFound -25300) (macOS)The specified item …Notarization: The binary is not signed with a valid Developer ID — macOS notarytool: status: Invalid — The binary is not signed with a valid Developer ID certificate / does not have the hardened runtime enabled (macOS)Notarization: The b…hdiutil: image not recognized / no mountable file systems — macOS: hdiutil: attach failed - image not recognized / no mountable file systems (macOS)hdiutil: image not …System software from "x" was blocked from loading — macOS: System Extension Blocked — A program tried to load new system extension(s) / System software was blocked from loading (macOS)System software fro…ActiveModel::ForbiddenAttributesError (strong parameters) — Rails: ActiveModel::ForbiddenAttributesError (Ruby / Rails)ActiveModel::Forbid…webhook signature — Webhook signature verification failed (Stripe, Razorpay, GitHub…) (API)webhook signatureviolates PodSecurity — Error creating: pods is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false ... (Kubernetes)violates PodSecurityavc: denied — SELinux is preventing ... / avc: denied { read } for pid=... (permission denied despite correct permissions) (Linux)avc: deniedpublickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyHost key verification failed — Host key verification failed. fatal: Could not read from remote repository. (Git)Host key verificati…ssh port 22 Connection refused — ssh: connect to host x port 22: Connection refused (Linux)ssh port 22 Connect…dpkg lock — E: Could not get lock /var/lib/dpkg/lock-frontend — is another process using it? (Linux)dpkg lockUnable to locate package — E: Unable to locate package (apt / apt-get install) (Linux)Unable to locate pa…Sub-process /usr/bin/dpkg returned an error code (1) — E: Sub-process /usr/bin/dpkg returned an error code (1) (Linux)Sub-process /usr/bi…gpg failed to sign — error: gpg failed to sign the data — fatal: failed to write commit object (Git)gpg failed to signdoesn't include the currently selected device — Provisioning profile "x" doesn't include the currently selected device (iOS)doesn't include the…Signing requires a development team — Signing for "App" requires a development team. Select a development team in the Signing & Capabilities editor (iOS)Signing requires a …No Xcode or CLT — gyp: No Xcode or CLT version detected! (npm)No Xcode or CLTzsh: command not found: brew — macOS: zsh: command not found: brew (Homebrew not on PATH on Apple Silicon) (macOS)zsh: command not fo…You have not agreed to the Xcode license agreements — macOS: Agreeing to the Xcode/iOS license requires admin privileges, please run "sudo xcodebuild -license" and then retry this command (macOS)You have not agreed…exec format error — exec /usr/local/bin/docker-entrypoint.sh: exec format error (Docker)exec format errorxcode-select: error: tool 'xcodebuild' requires Xcode — macOS: xcode-select: error: tool 'xcodebuild' requires Xcode, but active developer directory '/Library/Developer/CommandLineTools' is a command line tools instance (macOS)xcode-select: error…Homebrew: Permission denied @ dir_s_mkdir — Homebrew: Error: Permission denied @ dir_s_mkdir - /usr/local/Cellar / /opt/homebrew is not writable (macOS)Homebrew: Permissio…Bad configuration option: usekeychain — ssh: /Users/me/.ssh/config: line 5: Bad configuration option: usekeychain (macOS)Bad configuration o…git: 'credential-osxkeychain' is not a git command — Git: git: 'credential-osxkeychain' is not a git command. See 'git --help' (macOS)git: 'credential-os…ssh-agent: keys lost after reboot / passphrase asked every time — macOS: Enter passphrase for key '/Users/me/.ssh/id_ed25519': (every time after restart) (macOS)ssh-agent: keys los…Failed to register bundle identifier — Failed to register bundle identifier: The app identifier "com.x" cannot be registered to your development team because it is not available (iOS)Failed to register …doesn't include signing certificate — Provisioning profile "x" doesn't include signing certificate "Apple Development: Name (ID)" (iOS)doesn't include sig…Command CodeSign failed — Command CodeSign failed with a nonzero exit code (errSecInternalComponent / resource fork, Finder information not allowed) (iOS)Command CodeSign fa…Homebrew: No available formula with the name — Homebrew: Error: No available formula with the name "x". Did you mean ...? (macOS)Homebrew: No availa…Your Command Line Tools are too outdated — Homebrew: Error: Your Command Line Tools (CLT) are too outdated. Update them from Software Update / Please update to the latest macOS (macOS)Your Command Line T…hdiutil: create failed - Resource busy — macOS: hdiutil: create failed - Resource busy (or: hdiutil: couldn't eject "disk2" - Resource busy) (macOS)hdiutil: create fai…ITMS-90206 — ITMS-90206: Invalid Bundle. The bundle at 'App.appex' contains disallowed file 'Frameworks' (iOS)ITMS-90206Docker Desktop requires privileged access (vmnetd) — macOS: Docker Desktop needs privileged access / com.docker.vmnetd could not be started (macOS)Docker Desktop requ…Camera/Microphone access denied (TCC) — macOS: avfoundation: Could not start capture / "Terminal" does not have access to the camera or microphone — tccd denied (macOS)Camera/Microphone a…MassAssignmentException — Laravel: Illuminate\Database\Eloquent\MassAssignmentException: Add [x] to fillable property to allow mass assignment (Laravel)MassAssignmentExcep…DENIED Redis is running in protected mode — Redis: DENIED Redis is running in protected mode because protected mode is enabled and no password is set for the default user (Redis)DENIED Redis is run…ActiveRecord::RecordInvalid: Validation failed — Rails: ActiveRecord::RecordInvalid: Validation failed: Email can't be blank, Name is too short (Ruby / Rails)ActiveRecord::Recor…

Directly related (12)

is damaged and can’t be openedmacOS

macOS: “App” is damaged and can’t be opened. You should move it to the Trash.

Gatekeeper blocked an app that isn’t properly signed/notarized or was modified after download (quarantine attribute).

REMOTE HOST IDENTIFICATION HAS CHANGEDLinux

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed)

The server’s SSH host key differs from the one saved in ~/.ssh/known_hosts — usually because the server was rebuilt or the IP was…

NO_PUBKEYLinux

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY

apt can’t verify a repository’s signature because the repo’s signing key isn’t installed (or has expired/rotated).

"x" can't be opened because it is from an unidentified developermacOS

macOS: “app” can’t be opened because it is from an unidentified developer

Gatekeeper refuses to open an app that isn't signed with a registered Developer ID.

codesign: resource fork, Finder information, or similar detritus not allowedmacOS

macOS: Error: resource fork, Finder information, or similar detritus not allowed

`codesign` refuses to sign a bundle that contains extended attributes (resource forks, quarantine, FinderInfo).

Homebrew Cask: It seems there is already an App atmacOS

Homebrew: Error: It seems there is already an App at '/Applications/Chrome.app'

A cask install failed because the app is already installed manually (or a leftover exists).

zsh: bad CPU type in executablemacOS

macOS (Apple Silicon): zsh: bad CPU type in executable: ./tool

You ran an Intel (x86_64) program on an Apple Silicon Mac without Rosetta 2 (or an arm64 binary on an Intel Mac).

The specified item could not be found in the keychain (-25300)macOS

macOS: security: SecKeychainSearchCopyNext: The specified item could not be found in the keychain. (errSecItemNotFound -25300)

A lookup in the macOS keychain found no matching item, or access to it was denied.

Notarization: The binary is not signed with a valid Developer IDmacOS

macOS notarytool: status: Invalid — The binary is not signed with a valid Developer ID certificate / does not have the hardened runtime enabled

Apple's notary service rejected your app; the log lists exactly which binaries failed which checks.

hdiutil: image not recognized / no mountable file systemsmacOS

macOS: hdiutil: attach failed - image not recognized / no mountable file systems

The `.dmg` file is corrupted, incomplete, or not actually a disk image (often an HTML download page).

System software from "x" was blocked from loadingmacOS

macOS: System Extension Blocked — A program tried to load new system extension(s) / System software was blocked from loading

macOS blocked a kernel/system extension (VPN, virtualization, drivers) until you approve it.

ActiveModel::ForbiddenAttributesError (strong parameters)Ruby / Rails

Rails: ActiveModel::ForbiddenAttributesError

You passed raw `params` to `new/create/update`, but strong parameters require permitting attributes first.

Two steps away (33)

webhook signatureAPI

Webhook signature verification failed (Stripe, Razorpay, GitHub…)

Your endpoint computed a different HMAC signature than the one the provider sent, so the webhook is rejected.

violates PodSecurityKubernetes

Error creating: pods is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false ...

The namespace enforces a Pod Security Standard (baseline/restricted) and the pod spec breaks one of its rules.

avc: deniedLinux

SELinux is preventing ... / avc: denied { read } for pid=... (permission denied despite correct permissions)

SELinux blocked the access — file permissions look fine, but the file’s security context or a boolean doesn’t allow the service t…

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

Host key verification failedGit

Host key verification failed. fatal: Could not read from remote repository.

SSH doesn’t trust the server’s host key — first connection in a non-interactive environment, or the key changed.

ssh port 22 Connection refusedLinux

ssh: connect to host x port 22: Connection refused

The server answered, but nothing is listening on the SSH port — sshd isn’t running, it uses another port, or a firewall actively…

dpkg lockLinux

E: Could not get lock /var/lib/dpkg/lock-frontend — is another process using it?

apt can’t run because another package operation (often automatic updates) holds the dpkg lock.

Unable to locate packageLinux

E: Unable to locate package (apt / apt-get install)

apt can’t find the package name in its package lists — the lists are stale, the repository isn’t enabled, or the name is wrong fo…

Sub-process /usr/bin/dpkg returned an error code (1)Linux

E: Sub-process /usr/bin/dpkg returned an error code (1)

A package’s install/configure script failed, so dpkg aborted. The real error is a few lines above this message.

gpg failed to signGit

error: gpg failed to sign the data — fatal: failed to write commit object

Commit signing is enabled but GPG couldn’t sign — no TTY for the passphrase, wrong key, or agent not running.

doesn't include the currently selected deviceiOS

Provisioning profile "x" doesn't include the currently selected device

The development profile doesn’t list this iPhone’s UDID, so Xcode can’t install the build on it.

Signing requires a development teamiOS

Signing for "App" requires a development team. Select a development team in the Signing & Capabilities editor

No Apple developer team is selected for the target, so Xcode can’t sign the app.

No Xcode or CLTnpm

gyp: No Xcode or CLT version detected!

node-gyp on macOS can’t find the Xcode Command Line Tools to compile native modules.

zsh: command not found: brewmacOS

macOS: zsh: command not found: brew (Homebrew not on PATH on Apple Silicon)

Homebrew is installed in /opt/homebrew on Apple Silicon Macs, which isn’t on PATH until you add its shellenv line.

You have not agreed to the Xcode license agreementsmacOS

macOS: Agreeing to the Xcode/iOS license requires admin privileges, please run "sudo xcodebuild -license" and then retry this command

A new Xcode (or CLT) version needs its license accepted before command-line tools run.

exec format errorDocker

exec /usr/local/bin/docker-entrypoint.sh: exec format error

The container tried to run a binary built for a different CPU architecture (arm64 vs amd64) — or a script with a broken shebang /…

xcode-select: error: tool 'xcodebuild' requires XcodemacOS

macOS: xcode-select: error: tool 'xcodebuild' requires Xcode, but active developer directory '/Library/Developer/CommandLineTools' is a command line tools instance

A command needs the full Xcode app, but `xcode-select` points to the Command Line Tools only.

Homebrew: Permission denied @ dir_s_mkdirmacOS

Homebrew: Error: Permission denied @ dir_s_mkdir - /usr/local/Cellar / /opt/homebrew is not writable

Homebrew can't write to its prefix because the folders are owned by another user or root.

Bad configuration option: usekeychainmacOS

ssh: /Users/me/.ssh/config: line 5: Bad configuration option: usekeychain

The `UseKeychain` option in `~/.ssh/config` is only understood by Apple's OpenSSH, not by a Homebrew/other OpenSSH.

git: 'credential-osxkeychain' is not a git commandmacOS

Git: git: 'credential-osxkeychain' is not a git command. See 'git --help'

Git is configured to use the macOS keychain helper, but the helper binary isn't found by the Git you're running.

ssh-agent: keys lost after reboot / passphrase asked every timemacOS

macOS: Enter passphrase for key '/Users/me/.ssh/id_ed25519': (every time after restart)

macOS doesn't automatically reload SSH keys into the agent after a restart unless configured to use the keychain.

Failed to register bundle identifieriOS

Failed to register bundle identifier: The app identifier "com.x" cannot be registered to your development team because it is not available

Another developer team already owns that bundle identifier, so Xcode can’t create it for your team.

doesn't include signing certificateiOS

Provisioning profile "x" doesn't include signing certificate "Apple Development: Name (ID)"

The profile was created with a different certificate than the one installed in your keychain.

Command CodeSign failediOS

Command CodeSign failed with a nonzero exit code (errSecInternalComponent / resource fork, Finder information not allowed)

codesign failed — the keychain is locked (CI/SSH), the private key is inaccessible, or files carry extended attributes that can’t…

Homebrew: No available formula with the namemacOS

Homebrew: Error: No available formula with the name "x". Did you mean ...?

Homebrew can't find a formula or cask with that name in the taps it knows.

Your Command Line Tools are too outdatedmacOS

Homebrew: Error: Your Command Line Tools (CLT) are too outdated. Update them from Software Update / Please update to the latest macOS

Homebrew requires a newer Command Line Tools version than the one installed.

hdiutil: create failed - Resource busymacOS

macOS: hdiutil: create failed - Resource busy (or: hdiutil: couldn't eject "disk2" - Resource busy)

A disk image operation failed because the volume or a file in it is still in use (Finder, Spotlight, a terminal).

ITMS-90206iOS

ITMS-90206: Invalid Bundle. The bundle at 'App.appex' contains disallowed file 'Frameworks'

An app extension (or framework) embeds its own Frameworks folder; only the main app may embed frameworks.

Docker Desktop requires privileged access (vmnetd)macOS

macOS: Docker Desktop needs privileged access / com.docker.vmnetd could not be started

Docker Desktop couldn't install or start its privileged helper, so it can't set up networking.

Camera/Microphone access denied (TCC)macOS

macOS: avfoundation: Could not start capture / "Terminal" does not have access to the camera or microphone — tccd denied

Privacy (TCC) blocks the app or terminal from the camera or microphone until you allow it.

MassAssignmentExceptionLaravel

Laravel: Illuminate\Database\Eloquent\MassAssignmentException: Add [x] to fillable property to allow mass assignment

You passed an array to create()/update()/fill() containing a field that isn’t in the model’s $fillable list.

DENIED Redis is running in protected modeRedis

Redis: DENIED Redis is running in protected mode because protected mode is enabled and no password is set for the default user

Redis refuses connections from non-local clients when it has no password and is bound to all interfaces.

ActiveRecord::RecordInvalid: Validation failedRuby / Rails

Rails: ActiveRecord::RecordInvalid: Validation failed: Email can't be blank, Name is too short

`save!`/`create!`/`update!` raised because validations failed.