Yes that checksum you posted is correct for Linux. sha256sum is probably
what you're looking to invoke on linux rather than shasum -a 256 which
works on macOS.Also, you need to run the checksum against the compressed
.zip file rather than the .run fi...
You can probably start here.
https://www.jamf.com/trust-center/information-security/ If you're
looking for reports, you will need to request them from Jamf's security
page https://security.jamf.com/
It appears you may need to notarize the pkg in order to pass that check.
Signing is not sufficient anymore for distribution outside of MDM. Here
is the official document from Apple outlining
Notarization.https://developer.apple.com/documentation/xcod...
You may need to reach out to your Jamf buddy to have an engineer look
into your instance. We run Jamf on-prem on AWS and ran into these same
issues when the web server was not allocated with enough space as it has
to cache the file there before it ge...
@tlarkin A mix but that is decided by a different team concerning
Security and Risk. Mainly the ask was for something that didn't require
SIP to be turned off. In what I've looked at so far, it may have to be a
combination of tools working in unison ...