From e56fde65843cbc0083f64aacc97b0dc5d6b0eebd Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Sat, 13 Jul 2024 16:02:12 -0400 Subject: [PATCH] formula_installer: skip attestations on local_bottle_path Signed-off-by: William Woodruff --- Library/Homebrew/formula_installer.rb | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Library/Homebrew/formula_installer.rb b/Library/Homebrew/formula_installer.rb index f2faedbe29..ec9f77a61a 100644 --- a/Library/Homebrew/formula_installer.rb +++ b/Library/Homebrew/formula_installer.rb @@ -1258,7 +1258,12 @@ on_request: installed_on_request?, options:) def pour # We skip `gh` to avoid a bootstrapping cycle, in the off-chance a user attempts # to explicitly `brew install gh` without already having a version for bootstrapping. - if Homebrew::Attestation.enabled? && formula.tap&.core_tap? && formula.name != "gh" + # We also skip bottle installs from local bottle paths, as these are done in CI + # as part of the build lifecycle before attestations are produced. + if Homebrew::Attestation.enabled? \ + && formula.tap&.core_tap? \ + && formula.name != "gh" \ + && formula.local_bottle_path.blank? ohai "Verifying attestation for #{formula.name}" begin Homebrew::Attestation.check_core_attestation formula.bottle