Skip to content

brew 5.1.15 warns about xcodes brew tab being untrusted, whilst trust check will be enforced in future homebrew 5.2 or 6.0 versions #478

@Ybalrid

Description

@Ybalrid

I'd like to report the following warning from the homebrew package manager:

While updating packages on my mac, I got the following warning:

Warning: The following taps are not trusted:
  xcodesorg/made

Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set.
This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first.
Enable trust checks now with:
  export HOMEBREW_REQUIRE_TAP_TRUST=1
Trust specific formulae, casks or commands with:
  brew trust --formula <user>/<tap>/<formula>
  brew trust --cask <user>/<tap>/<cask>
  brew trust --command <user>/<tap>/<command>
or trust installed formulae from these taps with:
  brew trust --formula xcodesorg/made/xcodes
You can trust all formulae, casks and commands from these taps with:
  brew trust xcodesorg/made
Prefer trusting only the specific formulae, casks or commands you need.
Untap them with:
  brew untap xcodesorg/made
To keep allowing them by default during the transition:
  export HOMEBREW_NO_REQUIRE_TAP_TRUST=1
This is not recommended and will be removed in a later release.

To confirm, here's the output of brew untrust on my machine:

Untrusted taps:
  xcodesorg/made
Untrusted formulae:
  xcodesorg/made/xcodes

In following versions, it will be required to instruct users to manually trust the formula/cask/tap when installing packages from unofficial homebrew taps according to this documentation.

I do not think there's any mechanism the XcodesOrg team can use to make the xcodes formula be "trusted by default", but I may be wrong about that.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions