diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9fdc26914..3b014f1ad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -480,6 +480,8 @@ jobs:
                 -DCPACK_BUNDLE_APPLE_CERT_APP="-" \
                 .. && \
               make -j4;
+        echo killing XProtectBehaviorService; sudo pkill -9 XProtect >/dev/null || true;
+        echo waiting for XProtectBehaviorService kill; while pgrep XProtect; do sleep 3; done;
         make package
         export CUTTER_VERSION=$(python3 ../scripts/get_version.py)
         echo PACKAGE_NAME=${PACKAGE_NAME}.dmg >> $GITHUB_ENV