From 616026ce1c70dec656211a59d0a0078d7be4b057 Mon Sep 17 00:00:00 2001 From: "trop[bot]" <37223003+trop[bot]@users.noreply.github.com> Date: Wed, 18 Feb 2026 22:24:13 +0000 Subject: [PATCH] docs: clarify ASAR integrity is supported in MAS builds (#49853) * docs: clarify ASAR integrity is supported in MAS builds Add a note to the ASAR integrity documentation explicitly stating that this feature is fully supported and recommended in Mac App Store builds. While MAS-installed apps have system-level protections, ASAR integrity provides an additional security layer and is important for MAS builds distributed outside the Mac App Store. Slack thread: https://electronhq.slack.com/archives/CB6CG54DB/p1771449093872419?thread_ts=1771446183.473289&cid=CB6CG54DB https://claude.ai/code/session_01A97nfiqHUVxLNaQyHVXS7j Co-authored-by: Claude * docs: clarify ASAR integrity support for MAS builds Updates the ASAR integrity documentation to explicitly mention that it is supported and recommended in Mac App Store builds. Clarifies that while MAS-installed apps have system-level protections (Resources folder owned by root), ASAR integrity is especially important when distributing MAS builds through other channels like direct download, since those installations won't have the read-only protections. https://claude.ai/code/session_012mBNZQW34h91NRcdFaLxNh Co-authored-by: Claude --------- Co-authored-by: trop[bot] <37223003+trop[bot]@users.noreply.github.com> Co-authored-by: Claude --- docs/tutorial/asar-integrity.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/tutorial/asar-integrity.md b/docs/tutorial/asar-integrity.md index 22ef79f5d1..0362ea5427 100644 --- a/docs/tutorial/asar-integrity.md +++ b/docs/tutorial/asar-integrity.md @@ -15,6 +15,14 @@ Currently, ASAR integrity checking is supported on: * macOS as of `electron>=16.0.0` * Windows as of `electron>=30.0.0` +> [!NOTE] +> ASAR integrity is fully supported in Mac App Store (MAS) builds and is recommended +> as a best practice. While MAS-installed applications have their `Resources/` folder +> protected by the system (owned by root), ASAR integrity still provides an additional +> layer of security. It is especially important if you use Electron's MAS build but +> distribute your app through channels other than the Mac App Store (such as direct +> download), since those installations won't have the system-level read-only protections. + In order to enable ASAR integrity checking, you also need to ensure that your `app.asar` file was generated by a version of the `@electron/asar` npm package that supports ASAR integrity.