attestation: only enable for developers outside CI

Let's hold off on CI and devcmdrun for now.
This commit is contained in:
Mike McQuaid 2024-07-13 17:55:44 -04:00 committed by GitHub
parent 3ff8b65109
commit 5771c2f968
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -48,10 +48,10 @@ module Homebrew
# TODO: allow this undocumented variable until this is rolled out more
# widely and then we can remove or document it.
return false if ENV.fetch("HOMEBREW_NO_VERIFY_ATTESTATIONS", false)
Homebrew::EnvConfig.verify_attestations? ||
Homebrew::EnvConfig.developer? ||
Homebrew::Settings.read("devcmdrun") == "true"
return true if Homebrew::EnvConfig.verify_attestations?
return false if ENV.fetch("CI", false)
Homebrew::EnvConfig.developer?
end
# Returns a path to a suitable `gh` executable for attestation verification.