[master]: Merge pull request #18562 from Homebrew/verify-attestation-at-fetch

[master]: Merge pull request #18562 from Homebrew/verify-attestation-at-fetch #3088