diff --git a/Library/Homebrew/attestation.rb b/Library/Homebrew/attestation.rb
index 73567b8d8e2e0..2055fd0f021f0 100644
--- a/Library/Homebrew/attestation.rb
+++ b/Library/Homebrew/attestation.rb
@@ -48,10 +48,10 @@ def self.enabled?
       # TODO: allow this undocumented variable until this is rolled out more
       #       widely and then we can remove or document it.
       return false if ENV.fetch("HOMEBREW_NO_VERIFY_ATTESTATIONS", false)
+      return true if Homebrew::EnvConfig.verify_attestations?
+      return false if ENV.fetch("CI", false)
 
-      Homebrew::EnvConfig.verify_attestations? ||
-        Homebrew::EnvConfig.developer? ||
-        Homebrew::Settings.read("devcmdrun") == "true"
+      Homebrew::EnvConfig.developer?
     end
 
     # Returns a path to a suitable `gh` executable for attestation verification.