diff --git a/README.md b/README.md
index 3c00221c7321..771cc0b9d802 100644
--- a/README.md
+++ b/README.md
@@ -57,6 +57,11 @@ brew tap anchore/syft
 brew install syft
 ```
 
+You may experience a "macOS cannot verify app is free from malware" error upon running Syft because it is not yet signed and notarized. You can override this using `xattr`.
+```bash
+xattr -rd com.apple.quarantine syft
+```
+
 ## Configuration
 
 Configuration search paths: