From 5771c2f968ab1710517ba30f079038e40c6bbcc0 Mon Sep 17 00:00:00 2001 From: Mike McQuaid Date: Sat, 13 Jul 2024 17:55:44 -0400 Subject: [PATCH] attestation: only enable for developers outside CI Let's hold off on CI and devcmdrun for now. --- Library/Homebrew/attestation.rb | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Library/Homebrew/attestation.rb b/Library/Homebrew/attestation.rb index 73567b8d8e2e0..c4c77f6dc07f6 100644 --- a/Library/Homebrew/attestation.rb +++ b/Library/Homebrew/attestation.rb @@ -48,10 +48,10 @@ def self.enabled? # TODO: allow this undocumented variable until this is rolled out more # widely and then we can remove or document it. return false if ENV.fetch("HOMEBREW_NO_VERIFY_ATTESTATIONS", false) - - Homebrew::EnvConfig.verify_attestations? || - Homebrew::EnvConfig.developer? || - Homebrew::Settings.read("devcmdrun") == "true" + return true if Homebrew::EnvConfig.verify_attestations? + return false if ENV.fetch("CI", false) + + Homebrew::EnvConfig.developer? end # Returns a path to a suitable `gh` executable for attestation verification.