Merge pull request #17712 from Homebrew/homebrew_no_verify_attestations

Homebrew · Jul 13, 2024 · 3ff8b65 · 3ff8b65
2 parents 6b99ac5 + 4366ade
commit 3ff8b65
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/Library/Homebrew/attestation.rb b/Library/Homebrew/attestation.rb
@@ -45,9 +45,13 @@ class GhAuthNeeded < RuntimeError; end
     # @api private
     sig { returns(T::Boolean) }
     def self.enabled?
-      Homebrew::EnvConfig.verify_attestations? \
-        || Homebrew::EnvConfig.developer? \
-        || Homebrew::Settings.read("devcmdrun") == "true"
+      # TODO: allow this undocumented variable until this is rolled out more
+      #       widely and then we can remove or document it.
+      return false if ENV.fetch("HOMEBREW_NO_VERIFY_ATTESTATIONS", false)
+
+      Homebrew::EnvConfig.verify_attestations? ||
+        Homebrew::EnvConfig.developer? ||
+        Homebrew::Settings.read("devcmdrun") == "true"
     end
 
     # Returns a path to a suitable `gh` executable for attestation verification.