diff --git a/detection/execution/unexpected-gatekeeper-approvals-macos.sql b/detection/execution/unexpected-gatekeeper-approvals-macos.sql
index b640b87..b36d6d2 100644
--- a/detection/execution/unexpected-gatekeeper-approvals-macos.sql
+++ b/detection/execution/unexpected-gatekeeper-approvals-macos.sql
@@ -6,7 +6,7 @@
 -- false positives:
 --   * developers downloading binaries from Github
 --
--- platform: macos
+-- platform: darwin
 -- tags: persistent filesystem state gatekeeper
 SELECT
   gap.ctime,