diff --git a/Library/Homebrew/cmd/update.sh b/Library/Homebrew/cmd/update.sh
index 25ae436498..152c0f31bb 100644
--- a/Library/Homebrew/cmd/update.sh
+++ b/Library/Homebrew/cmd/update.sh
@@ -420,7 +420,7 @@ EOS
   then
     # we cannot install `gh` if homebrew/core is unavailable.
     # we don't enable attestations on `gh` itself, to prevent a bootstrap cycle.
-    if [[ -z "${HOMEBREW_CORE_AVAILABLE}" ]] || ! HOMEBREW_VERIFY_ATTESTATIONS='' brew install gh
+    if [[ -z "${HOMEBREW_CORE_AVAILABLE}" ]] || ! env -u HOMEBREW_VERIFY_ATTESTATIONS brew install gh
     then
       odie "'gh' must be installed and in your PATH!"
     fi
diff --git a/Library/Homebrew/sorbet/rbi/dsl/homebrew/env_config.rbi b/Library/Homebrew/sorbet/rbi/dsl/homebrew/env_config.rbi
index a1a75c94cb..e7a56d8586 100644
--- a/Library/Homebrew/sorbet/rbi/dsl/homebrew/env_config.rbi
+++ b/Library/Homebrew/sorbet/rbi/dsl/homebrew/env_config.rbi
@@ -260,5 +260,8 @@ module Homebrew::EnvConfig
 
     sig { returns(T::Boolean) }
     def verbose_using_dots?; end
+
+    sig { returns(T::Boolean) }
+    def verify_attestations?; end
   end
 end