admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

Merge pull request #20229 from Homebrew/attestation_opt_in

Browse Source 
attestation: require explicit opt-in.
This commit is contained in:
Mike McQuaid 2025-07-10 08:24:48 +00:00 committed by GitHub
commit 5bc5d53a23
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Library/Homebrew/attestation.rb
View File

@ -64,12 +64,8 @@ module Homebrew
sig { returns(T::Boolean) } sig { returns(T::Boolean) }
def self.enabled? def self.enabled?
return false if Homebrew::EnvConfig.no_verify_attestations? return false if Homebrew::EnvConfig.no_verify_attestations?
return true if Homebrew::EnvConfig.verify_attestations?
return false if ENV.fetch("CI", false)
return false if OS.not_tier_one_configuration?
# Always check credentials last to avoid unnecessary credential extraction. Homebrew::EnvConfig.verify_attestations?
(Homebrew::EnvConfig.developer? || Homebrew::EnvConfig.devcmdrun?) && GitHub::API.credentials.present?
end end
# Returns a path to a suitable `gh` executable for attestation verification. # Returns a path to a suitable `gh` executable for attestation verification.