Merge pull request #20292 from Homebrew/codesign-audit-shell-scripts

cask/audit: skip signing audit for shell scripts
This commit is contained in:
Bevan Kay 2025-07-23 02:41:01 +00:00 committed by GitHub
commit 24a2aad520
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -512,6 +512,9 @@ module Cask
when Artifact::App
system_command("spctl", args: ["--assess", "--type", "execute", path], print_stderr: false)
when Artifact::Binary
# Shell scripts cannot be signed, so we skip them
next if path.text_executable?
system_command("codesign", args: ["--verify", path], print_stderr: false)
else
add_error "Unknown artifact type: #{artifact.class}", location: url.location