Add macOS ad-hoc signing and first launch instructions

.github/workflows/build.yml

@@ -292,6 +292,9 @@ jobs:
     runs-on: ${{ matrix.os }}
     permissions:
       contents: write
+    env:
+      # Ad-hoc signing: allows app to run after "xattr -cr" on macOS
+      APPLE_SIGNING_IDENTITY: "-"
 
     steps:
       - uses: actions/checkout@v4
@@ -360,18 +363,6 @@ jobs:
         run: |
           cargo tauri build --target "${{ matrix.target }}" --bundles dmg,app
 
-      - name: Ad-hoc sign the app
-        shell: bash
-        env:
-          CARGO_TARGET_DIR: src-tauri/target/${{ matrix.target }}
-        run: |
-
-          APP_PATH=$(find "$CARGO_TARGET_DIR/release/bundle/macos" -name "*.app" -type d | head -1)
-          if [ -n "$APP_PATH" ]; then
-            echo "Ad-hoc signing: $APP_PATH"
-            codesign --force --deep --sign - "$APP_PATH"
-          fi
-
       - name: Zip .app bundle(s)
         shell: bash
         env:

README.md

@@ -39,10 +39,23 @@
 |:---:|:---:|:---:|
 | **macOS** | **Windows** | **Linux** |
 | [Intel & Apple Silicon](https://github.com/armbian/imager/releases) | [x64 & ARM64](https://github.com/armbian/imager/releases) | [x64 & ARM64](https://github.com/armbian/imager/releases) |
-| `.dmg` | `.exe` / `.msi` | `.deb` |
+| `.dmg` / `.app.zip` | `.exe` / `.msi` | `.deb` |
 
 </p>
 
+### macOS: First Launch
+
+macOS may show a warning because the app is not signed with an Apple Developer certificate. To open it:
+
+**Option 1:** Right-click the app → **Open** → Click **Open** in the dialog
+
+**Option 2:** Run in Terminal:
+```bash
+xattr -cr "/Applications/Armbian Imager.app"
+```
+
+This only needs to be done once.
+
 ## How It Works
 
 1. **Select Manufacturer** — Choose from 70+ SBC manufacturers or load a custom image