Currently if the latest release of jsctl is downloaded from a release and then executed on macOS, it'll fail to open because we've not signed the binary (as described here: https://medium.com/anchore-engineering/developers-need-to-handle-macos-binary-signing-how-we-automated-the-solution-part-1-4433b32ae311).
There's an easy workaround but it's not a great developer experience. Would be better if we could provide a signed binary!