Repository navigation
Bug: AWS SAM CLI installer for MacOS ARM - SHA 256 not match #8420
Description
Description:
Fingerprint string doesn’t match
Steps to reproduce:
Download file from https://github.com/aws/aws-sam-cli/releases/latest/download/aws-sam-cli-macos-arm64.pkg
execute:
pkgutil --check-signature aws-sam-cli-macos-arm64.pkg
Observed result:
Package "aws-sam-cli-macos-arm64.pkg":
Status: signed by a developer certificate issued by Apple for distribution
Notarization: trusted by the Apple notary service
Signed with a trusted timestamp on: 2025-11-06 20:41:15 +0000
Certificate Chain:
1. Developer ID Installer: AMZN Mobile LLC (94KV3E626L)
Expires: 2030-09-26 00:18:06 +0000
SHA256 Fingerprint:
5C 45 BE 63 FD 52 10 07 2D 66 56 77 5C A9 FF 25 91 6D 3F 01 F7 0E
9A 8A 05 F6 2D 62 B2 88 8D A9
------------------------------------------------------------------------
2. Developer ID Certification Authority
Expires: 2031-09-17 00:00:00 +0000
SHA256 Fingerprint:
F1 6C D3 C5 4C 7F 83 CE A4 BF 1A 3E 6A 08 19 C8 AA A8 E4 A1 52 8F
D1 44 71 5F 35 06 43 D2 DF 3A
------------------------------------------------------------------------
3. Apple Root CA
Expires: 2035-02-09 21:40:36 +0000
SHA256 Fingerprint:
B0 B1 73 0E CB C7 FF 45 05 14 2C 49 F1 29 5E 6E DA 6B CA ED 7E 2C
68 C5 BE 91 B5 A1 10 01 F0 24
Expected result:
The Developer ID Installer: AMZN Mobile LLC SHA256 fingerprint should match the following value:
49 68 39 4A BA 83 3B F0 CC 5E 98 3B E7 C1 72 AC 85 97 65 18 B9 4C BA 34 62 BF E9 23 76 98 C5 DA
Additional environment details (Ex: Windows, Mac, Amazon Linux etc)
- OS: macOS Tahoe Version 26.0.1
sam --version: not installed- AWS region: -
# Paste the output of `sam --info` here
Add --debug flag to command you are running
Activity
reedham-aws commentedon Nov 10, 2025
Hello, thank you for the callout. We are tracking this issue in #8380; this issue was that the key was rotated automatically, but the docs team was not notified to update https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/reference-sam-cli-install-verify.html.
github-actions commentedon Nov 10, 2025
Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.