admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

cask/audit: add skiplist for signing audit

Browse Source
This commit is contained in:
Bevan Kay 2025-08-11 22:08:05 +10:00
parent cf21efc318
commit c83f77b091
No known key found for this signature in database
GPG Key ID: C55CB024B5314B57
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Library/Homebrew/cask/audit.rb
View File

@ -502,6 +502,8 @@ module Cask
odebug "Auditing signing" odebug "Auditing signing"
is_in_skiplist = cask.tap&.audit_exception(:signing_audit_skiplist, cask.token)
extract_artifacts do |artifacts, tmpdir| extract_artifacts do |artifacts, tmpdir|
is_container = artifacts.any? { |a| a.is_a?(Artifact::App) || a.is_a?(Artifact::Pkg) } is_container = artifacts.any? { |a| a.is_a?(Artifact::App) || a.is_a?(Artifact::Pkg) }
@ -531,6 +533,7 @@ module Cask
next false if result.success? next false if result.success?
next true if cask.deprecated? && cask.deprecation_reason == :unsigned next true if cask.deprecated? && cask.deprecation_reason == :unsigned
next true if is_in_skiplist
add_error <<~EOS, location: url.location add_error <<~EOS, location: url.location
Signature verification failed: Signature verification failed:
@ -543,6 +546,9 @@ module Cask
end end
return if any_signing_failure return if any_signing_failure
add_error "Cask is in the signing audit skiplist, but does not need to be skipped!" if is_in_skiplist
return unless cask.deprecated? return unless cask.deprecated?
return if cask.deprecation_reason != :unsigned return if cask.deprecation_reason != :unsigned