admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

Merge pull request #17712 from Homebrew/homebrew_no_verify_attestations

Browse Source
This commit is contained in:
Mike McQuaid 2024-07-13 17:50:35 -04:00 committed by GitHub
commit 3ff8b65109
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Library/Homebrew/attestation.rb
View File

@ -45,9 +45,13 @@ module Homebrew
# @api private
sig { returns(T::Boolean) }
def self.enabled?
Homebrew::EnvConfig.verify_attestations? \
|| Homebrew::EnvConfig.developer? \
|| Homebrew::Settings.read("devcmdrun") == "true"
# TODO: allow this undocumented variable until this is rolled out more
# widely and then we can remove or document it.
return false if ENV.fetch("HOMEBREW_NO_VERIFY_ATTESTATIONS", false)
Homebrew::EnvConfig.verify_attestations? ||
Homebrew::EnvConfig.developer? ||
Homebrew::Settings.read("devcmdrun") == "true"
end
# Returns a path to a suitable `gh` executable for attestation verification.