验证Xcode真伪的方法，来自苹果官网
Xcode的验证你的版本 2015年9月22日
注意：中文为有道翻译，看下验证方法即可。
我们最近将应用程序从应用程序商店,还建有Xcode的假冒版本有可能对消费者造成伤害。你应该直接从Mac App Store下载Xcode,或从苹果开发者网站,离开看门人上启用你的系统,以防止篡改软件。
当你从Mac App Store下载Xcode,OS X自动检查Xcode的代码签名和验证代码由苹果签署。当你从苹果开发者网站上下载Xcode,签名的代码会自动检查和验证默认情况下只要你没有残疾的看门人。
你是否下载Xcode Xcode从苹果或接收从另一个来源,如USB或雷电磁盘,或者在一个本地网络,你可以很容易地验证的完整性Xcode的副本。
来验证你的身份Xcode的副本在终端系统上运行以下命令启用了看门人的:
spctl --assess --verbose /Applications/Xcode.app/
应用程序/在哪里Xcode安装的目录。
看门人使用这个工具执行相同的检查来验证签名的应用程序的代码。该工具需要几分钟来完成Xcode的评估。
工具应该返回以下结果Xcode的版本从Mac App Store下载:
/Applications/Xcode.app: acceptedsource=Mac
App Store和从苹果开发者网站下载一个版本,结果应该阅读
/Applications/Xcode.app: acceptedsource=Apple
或
/Applications/Xcode.app: acceptedsource=Apple System
“接受”以外的任何结果或任何来源除了“Mac App Store”,“苹果系统”或“苹果”表明,
Xcode的应用程序签名是无效的。
你应该下载一个干净的副本提交之前Xcode并重新编译你的应用程序进行审查。
本文由大学霸整理，转载请注明出处，尊重IT人！
原文：https://developer.apple.com/news/?id=09222015aValidating Your Version of XcodeSeptember 22, 2015We recently removed apps from the App Store that were built with a counterfeit version of Xcode which had the potential to cause harm to customers. You should always download Xcode directly from the Mac App Store, or from the Apple Developer website, and leave Gatekeeper enabled on all your systems to protect against tampered software.
When you download Xcode from the Mac App Store, OS X automatically checks the code signature for Xcode and validates that it is code signed by Apple. When you download Xcode from the Apple Developer website, the code signature is also automatically checked and validated by default as long as you have not disabled Gatekeeper.
Whether you downloaded Xcode from Apple or received Xcode from another source, such as a USB or Thunderbolt disk, or over a local network, you can easily verify the integrity of your copy of Xcode.
To verify the identity of your copy of Xcode run the following command in Terminal on a system with Gatekeeper enabled:
spctl --assess --verbose /Applications/Xcode.appwhere /Applications/ is the directory where Xcode is installed. This tool performs the same checks that Gatekeeper uses to validate the code signatures of applications. The tool can take up to several minutes to complete the assessment for Xcode.
The tool should return the following result for a version of Xcode downloaded from the Mac App Store:
/Applications/Xcode.app: acceptedsource=Mac App Storeand for a version downloaded from the Apple Developer web site, the result should read either/Applications/Xcode.app: acceptedsource=Appleor/Applications/Xcode.app: acceptedsource=Apple SystemAny result other than ‘accepted’ or any source other than ‘Mac App Store’, ‘Apple System’ or ‘Apple’ indicates that the application signature is not valid for Xcode. You should download a clean copy of Xcode and recompile your apps before submitting them for review.