{"id":21108091,"url":"https://github.com/jaybrown/macos-security-updates","last_synced_at":"2025-07-09T14:38:57.671Z","repository":{"id":134387198,"uuid":"125549589","full_name":"JayBrown/macOS-Security-Updates","owner":"JayBrown","description":"Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated","archived":false,"fork":false,"pushed_at":"2021-03-12T22:04:26.000Z","size":766,"stargazers_count":60,"open_issues_count":0,"forks_count":6,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-06-11T13:58:41.234Z","etag":null,"topics":["catalina","efi","gatekeeper","ibridge","launchagent","macos","malware","mrt","privacy","protection","security","tcc","xplorer","xprotect"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JayBrown.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-03-16T17:36:15.000Z","updated_at":"2025-06-11T13:18:28.000Z","dependencies_parsed_at":"2023-08-11T19:04:23.011Z","dependency_job_id":null,"html_url":"https://github.com/JayBrown/macOS-Security-Updates","commit_stats":null,"previous_names":[],"tags_count":7,"template":false,"template_full_name":null,"purl":"pkg:github/JayBrown/macOS-Security-Updates","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FmacOS-Security-Updates","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FmacOS-Security-Updates/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FmacOS-Security-Updates/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FmacOS-Security-Updates/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JayBrown","download_url":"https://codeload.github.com/JayBrown/macOS-Security-Updates/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FmacOS-Security-Updates/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264476835,"owners_count":23614581,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["catalina","efi","gatekeeper","ibridge","launchagent","macos","malware","mrt","privacy","protection","security","tcc","xplorer","xprotect"],"created_at":"2024-11-20T00:44:55.989Z","updated_at":"2025-07-09T14:38:57.638Z","avatar_url":"https://github.com/JayBrown.png","language":"Shell","readme":"![macsu-platform-macos](https://img.shields.io/badge/platform-macOS-lightgrey.svg)\n![macsu-code-shell](https://img.shields.io/badge/code-shell-yellow.svg)\n[![macsu-license](http://img.shields.io/badge/license-MIT+-blue.svg)](https://github.com/JayBrown/macOS-Security-Updates/blob/master/LICENSE)\n\n# macOS Security Updates (macSU) \u003cimg src=\"https://github.com/JayBrown/macOS-Security-Updates/blob/master/img/jb-img.png\" height=\"20px\"/\u003e\n\n**macOS Security Updates (macSU) is a LaunchAgent and shell script for macOS 10.15 (Catalina). It will run a scan every four hours and notify the user if any of the following macOS Security components has been been updated:**\n* **Gatekeeper**\n* **Gatekeeper E**\n* **Incompatible Kernel Extensions (KEXT Exclusions)**\n* **Malware Removal Tool (MRT)**\n* **TCC**\n* **XProtect**\n\n**Plus:**\n* **App Exceptions**\n* **Compatibility Notification Data**\n* **Core LSKD (kdrl)**\n* **Core Suggestions**\n* **Incompatible Apps**\n\n**Plus:**\n* **System**\n* **System build**\n* **EFI (Boot ROM)**\n* **iBridge**\n* **rootless.conf**\n\n**macSU now also checks against a remote database (hosted on GitHub) containing the current version numbers of the more important macOS security components. They are the first six in the list above. If any of them is outdated, the user will be notified. macSU will not notify the user when the system itself (which mostly includes EFI and iBridge) is out-of-date, to account for users who do not wish to update to a new system (immediately).**\n\n![screengrab](https://github.com/JayBrown/macOS-Security-Updates/blob/master/img/screengrab.jpg)\n\n## Installation\n* clone repo\n* `chmod +x macsu.zsh \u0026\u0026 ln -s macsu.zsh /usr/local/bin/macsu.zsh`\n* `cp local.lcars.macOSSecurityUpdates.plist $HOME/Library/LaunchAgents/local.lcars.macOSSecurityUpdates.plist`\n* `launchctl load $HOME/Library/LaunchAgents/local.lcars.macOSSecurityUpdates.plist`\n* optional: install **[terminal-notifier](https://github.com/julienXX/terminal-notifier)**\n\n### Testing\n**Execute `macsu.zsh` at least once**, e.g. by running the LaunchAgent with `launchctl start local.lcars.macOSSecurityUpdates`, or by calling the script directly: `./macsu.zsh`\n\nThen you can test the update notification functionality i.a. by entering the following command sequence:\n\n`plutil -replace CFBundleShortVersionString -integer 2098 \"$HOME/.cache/macSU/XP-version.plist\" \u0026\u0026 launchctl start local.lcars.macOSSecurityUpdates`\n\n### Notes\n* The agent (and thereby the script) will run every 4 hours.\n* **macSU** is only compatible with macOS 10.15 (Catalina).\n\n## Uninstall\n* `launchctl unload $HOME/Library/LaunchAgents/local.lcars.macOSSecurityUpdates.plist`\n* remove the cloned `macOS-Security-Updates` GitHub repository\n* `rm -f /usr/local/bin/macsu.zsh`\n* `rm -rf $HOME/.cache/macSU`\n* `rm -f $HOME/Library/Logs/local.lcars.macOSSecurityUpdates.log`\n* `rm -f /tmp/local.lcars.macOSSecurityUpdates.stdout`\n* `rm -f /tmp/local.lcars.macOSSecurityUpdates.stderr`\n\n## Future\n* find a way to read the System Integrity Protection (SIP) version number on Catalina\n\n## Thanks\n* **Howard Oakley** (@hoakleyelc) of **[EclecticLight](https://eclecticlight.co/)** for providing the [databases](https://github.com/hoakleyelc/updates) of current version numbers\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjaybrown%2Fmacos-security-updates","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjaybrown%2Fmacos-security-updates","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjaybrown%2Fmacos-security-updates/lists"}