admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

Merge pull request #20292 from Homebrew/codesign-audit-shell-scripts

Browse Source 
cask/audit: skip signing audit for shell scripts
This commit is contained in:
Bevan Kay 2025-07-23 02:41:01 +00:00 committed by GitHub
commit 24a2aad520
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Library/Homebrew/cask/audit.rb
View File

@ -512,6 +512,9 @@ module Cask
when Artifact::App when Artifact::App
system_command("spctl", args: ["--assess", "--type", "execute", path], print_stderr: false) system_command("spctl", args: ["--assess", "--type", "execute", path], print_stderr: false)
when Artifact::Binary when Artifact::Binary
# Shell scripts cannot be signed, so we skip them
next if path.text_executable?
system_command("codesign", args: ["--verify", path], print_stderr: false) system_command("codesign", args: ["--verify", path], print_stderr: false)
else else
add_error "Unknown artifact type: #{artifact.class}", location: url.location add_error "Unknown artifact type: #{artifact.class}", location: url.location