codesign: resource fork, Finder information, or similar detritus not allowed macOS Origin: Platform & cloud OSI layer 7 · Application Last updated 5 Nov 2026

macOS: Error: resource fork, Finder information, or similar detritus not allowed

codesign refuses to sign a bundle that contains extended attributes (resource forks, quarantine, FinderInfo).

Exact message you may see resource fork, Finder information, or similar detritus not allowedcodesign: resource fork, Finder information, or similar detritus not allowedCommand CodeSign failed with a nonzero exit code resource forkbundle format unrecognized, invalid, or unsuitable
Seen on: macOS

Meaning

Strip them before signing: xattr -cr MyApp.app (or xattr -rc). It often appears when files were copied via Finder, zip, or cloud storage that add xattrs. Also clean .DS_Store and ._* files.

Common causes

  • Extended attributes on files in the bundle
  • Files copied through Finder/zip/Dropbox
  • Quarantine attribute
  • Frameworks with stray ._ files
  • Build output modified after signing

⚡ Quick fix

  1. xattr -cr /path/MyApp.app then sign again
  2. Remove .DS_Store and ._*: find . -name '.DS_Store' -delete
  3. Sign as the last step of the build

Detailed fix by platform

macOS

  1. xattr -lr MyApp.app | head lists attributes; codesign --verify --deep --strict -vvv MyApp.app

How to diagnose

  1. xattrs — Present?
  2. Origin — Copy method?
  3. Order — Signed last?

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

Where this error sits

Origin: Platform & cloud. Errors that are often confused with or caused by this one (click to open):

"x" can't be opened because it is from an unidentified developer — macOS: “app” can’t be opened because it is from an unidentified developer (macOS)"x" can't be opened b…Apple could not verify "x" is free of malware — macOS: “app” cannot be opened because Apple cannot check it for malicious software / Apple could not verify “app” is free of malware that may harm your Mac (macOS)Apple could not verif…Command CodeSign failed — Command CodeSign failed with a nonzero exit code (errSecInternalComponent / resource fork, Finder information not allowed) (iOS)Command CodeSign fail…doesn't include signing certificate — Provisioning profile "x" doesn't include signing certificate "Apple Development: Name (ID)" (iOS)doesn't include signi…doesn't include the currently selected device — Provisioning profile "x" doesn't include the currently selected device (iOS)doesn't include the c…Failed to register bundle identifier — Failed to register bundle identifier: The app identifier "com.x" cannot be registered to your development team because it is not available (iOS)Failed to register bu…gpg failed to sign — error: gpg failed to sign the data — fatal: failed to write commit object (Git)gpg failed to signHomebrew Cask: It seems there is already an App at — Homebrew: Error: It seems there is already an App at '/Applications/Chrome.app' (macOS)Homebrew Cask: It see…codesign:…

Explore the map of this error Full error map →

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.

💬 What worked for others

No tips yet — did something else fix this for you?

Share what worked for you

Tips are checked by an editor before they appear. Links are removed.