From e99e6c8df7cb834de95edb5eaa209da8203b7fda Mon Sep 17 00:00:00 2001
From: Karol Broda <karol.broda@titanom.com>
Date: Sat, 20 Dec 2025 19:41:49 +0100
Subject: [PATCH] chore: update readme

---
 README.md | 20 +++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index f7ad8d8..9e1e225 100644
--- a/README.md
+++ b/README.md
@@ -32,14 +32,19 @@ nix profile install github:karol-broda/snitch
 
 download from [releases](https://github.com/karol-broda/snitch/releases):
 
-```bash
-# amd64
-curl -L https://github.com/karol-broda/snitch/releases/latest/download/snitch_linux_amd64.tar.gz | tar xz
-sudo mv snitch /usr/local/bin/
+- **linux:** `snitch_<version>_linux_<arch>.tar.gz` or `.deb`/`.rpm`/`.apk`
+- **macos:** `snitch_<version>_darwin_<arch>.tar.gz`
 
-# or install .deb/.rpm/.apk from releases
+```bash
+tar xzf snitch_*.tar.gz
+sudo mv snitch /usr/local/bin/
 ```
 
+> **macos:** if blocked with "cannot be opened because the developer cannot be verified", run:
+> ```bash
+> xattr -d com.apple.quarantine /usr/local/bin/snitch
+> ```
+
 ## quick start
 
 ```bash
@@ -174,5 +179,6 @@ theme = "auto"
 
 ## requirements
 
-- linux (reads from `/proc/net/*`)
-- root or `CAP_NET_ADMIN` for full process info
+- linux or macos
+- linux: reads from `/proc/net/*`, root or `CAP_NET_ADMIN` for full process info
+- macos: uses system APIs, may require sudo for full process info