Can't open Sourcetree because Apple cannot check it for malicious software

[Ben_Mach]

Just downloaded Sourcetree 4.0.1 from the Sourcetree website and received the following message - "Sourcetree' can’t be opened because Apple cannot check it for malicious software."

Note - I am running macOS 10.15.2. 

[Ben_Mach · Accepted solution]

Solution that helped me 

1) open 'system preferences' 
2) navigate to 'security & privacy' 
3) allow the use of Sourcetree

[Boris Yurkevich]

That is not a good and potentially very dangerous solution.

The only right solution is to move download app into the Trash and contact Atlassian. This build can be compromised and was not notarised. It's very easy to notarise application with Apple in automated fashion. Atlassian should fix this.

[Seth Cottam]

"The only right solution is to move download app into the Trash and contact Atlassian". That is non-solution.

Whenever the advice is to not use a viable product until they meet someone else's demands, then feel free to disregard. Whether or not you trust the brand and product is more important than whether or not it meets the demands of a 3rd party (Apple).

The number of excellent products that are not notarized with Apple is staggering. It's a nice extra step, that provides greater confidence in the implementation of some security precautions and features, but it's far from necessary.

[chris.kuipers]

Do you know what is staggering? The fact that Atlassian still has not solved this issue after at least half a year! The last update of Sourcetree is from januari this year.

[Joshua Smith]

The solution is to validate the download with the hash provided by Atlassian… Atlassian doesn't provide any way to validate?! The trash looks like the best solution to me too. If, however, the trash isn't an option, then you can "right-click" (two finger tap, control-click, or right-click) the app, choose "Open", then click "Open" on the window that appears.

I can understand a company choosing not to use Apple's validation, even a company as big as Atlassian; but I don't understand them also not having their own validation.

[karsten.rohweder]

Sourcetree is handling our company's most precious assets - our app's source code. I need to be able to trust it, and notarization is an integral part of the macOS trust and security system. It's ridiculous that after one year, this hasn't been addressed yet. I'm switching to another git client.

[Boris Yurkevich]

I’ve been using Tower for more than a month now both at home and at work, it’s been treating me well.

[JeremyC]

I'm having this issue again with https://product-downloads.atlassian.com/software/sourcetree/ga/Sourcetree_4.1.6_242.zip

Is this issue known to be occurring for that version?

[JeremyC]

Oh Atlassian just declines to certify?!  Seems sketch.

[Boris Yurkevich]

It seams that notarisation issue was resolved. I just tested the version 4.1.2 (238) and I was able to open the app in a normal way.