Comments (5)
I have the same problem.
brew config
HOMEBREW_VERSION: 4.3.9-307-g4aae003
ORIGIN: https://github.com/Homebrew/brew
HEAD: 4aae003a1a9caa4a5b22c3c9c23afd6b1ef58a0f
Last commit: 2 hours ago
Core tap HEAD: 613a2fcb6a1c91812563572d3baddcccafa6b8d1
Core tap last commit: 16 minutes ago
Core tap JSON: 18 Jul 05:06 UTC
Core cask tap HEAD: 988fe00e1ae18077a05121361f2917bab5123135
Core cask tap last commit: 2 hours ago
Core cask tap JSON: 18 Jul 05:06 UTC
HOMEBREW_PREFIX: /usr/local
HOMEBREW_CASK_OPTS: []
HOMEBREW_EDITOR: vim
HOMEBREW_GITHUB_API_TOKEN: set
HOMEBREW_MAKE_JOBS: 8
HOMEBREW_NO_AUTO_UPDATE: set
HOMEBREW_SORBET_RUNTIME: set
all_proxy: socks5://127.0.0.1:7890
http_proxy: http://127.0.0.1:7890
https_proxy: http://127.0.0.1:7890
Homebrew Ruby: 3.3.4 => /usr/local/Homebrew/Library/Homebrew/vendor/portable-ruby/3.3.4/bin/ruby
CPU: octa-core 64-bit haswell
Clang: 14.0.0 build 1400
Git: 2.45.2 => /usr/local/bin/git
Curl: 8.1.2 => /usr/bin/curl
macOS: 12.7.2-x86_64
CLT: 14.2.0.0.1.1668646533
Xcode: N/A
What happened
brew install bat
==> Downloading https://ghcr.io/v2/homebrew/core/bat/manifests/0.24.0_1
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/625e1a19c4e2949f7f24225b44af06a2bd2b1acd908be96c3017c940bc7c9354--bat-0.24.0_1.bottle_manifest.json
==> Fetching dependencies for bat: [email protected]
==> Downloading https://ghcr.io/v2/homebrew/core/libgit2/1.7/manifests/1.7.2
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/ecde05510a65fdaed70342439974074fb291160fa39ed3be025e2590f1a12133--libgit2@1.7-1.7.2.bottle_manifest.json
==> Fetching [email protected]
==> Downloading https://ghcr.io/v2/homebrew/core/libgit2/1.7/blobs/sha256:d7c8dea4ca2f97faf4e37e618f469181d0c128208518b33fee1af1c60a86a301
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/2a5a379561e3f13bad2b64abd536a7c02104076dd1a3e11604be7e92b785e5e9--libgit2@1.7--1.7.2.monterey.bottle.tar.gz
==> Fetching bat
==> Downloading https://ghcr.io/v2/homebrew/core/bat/blobs/sha256:14e1b6003fd419f35f525667d4997c42fc044f85709563c3f02833ecbb98e3dc
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/286bf03fac7a873ac2ea2f6c3462f8922bb9d202fbb538519f1023fa793b6ae0--bat--0.24.0_1.monterey.bottle.tar.gz
==> Installing dependencies for bat: [email protected]
==> Installing bat dependency: [email protected]
==> Downloading https://ghcr.io/v2/homebrew/core/libgit2/1.7/manifests/1.7.2
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/ecde05510a65fdaed70342439974074fb291160fa39ed3be025e2590f1a12133--libgit2@1.7-1.7.2.bottle_manifest.json
==> Verifying attestation for [email protected]
Error: The bottle for [email protected] has an invalid build provenance attestation.
This may indicate that the bottle was not produced by the expected
tap, or was maliciously inserted into the expected tap's bottle
storage.
Additional context:
attestation verification failed: Failure while executing; `/usr/bin/env GH_TOKEN=****** /usr/local/bin/gh attestation verify /Users/mako/Library/Caches/Homebrew/downloads/2a5a379561e3f13bad2b64abd536a7c02104076dd1a3e11604be7e92b785e5e9--libgit2@1.7--1.7.2.monterey.bottle.tar.gz --repo trailofbits/homebrew-brew-verify --format json` exited with 1. Here's the output:
Error: failed to fetch attestations from trailofbits/homebrew-brew-verify: HTTP 401: Bad credentials (https://api.github.com/repos/trailofbits/homebrew-brew-verify/attestations/sha256:d7c8dea4ca2f97faf4e37e618f469181d0c128208518b33fee1af1c60a86a301?per_page=30)
from brew.
Via bisecting, it should blame 570cf65, cc @woodruffw
Attestation was triggered even HOMEBREW_DEVELOPER and HOMEBREW_VERIFY_ATTESTATIONS are NOT set.
from brew.
Seems should also blame b8ff4b3 and 5771c2f, cc @MikeMcQuaid
Setting HOMEBREW_NO_VERIFY_ATTESTATIONS=1 will temporarily solve this issue, but @MikeMcQuaid you may need to adjust the enable?
logic later.
from brew.
HOMEBREW_NO_VERIFY_ATTESTATIONS
It work for me.
from brew.
If you're experiencing attestation failures, please follow up on this thread: Homebrew/homebrew-core#177384
from brew.
Related Issues (20)
- sudo timestamp reset may break scripts HOT 6
- Issue installing openJDK HOT 1
- `sudo` not working anymore after running any `brew` command HOT 10
- IRB no longer has irb_at_exit method HOT 2
- Failed to install Homebrew Portable Ruby (and your system version is too old)! HOT 4
- Improve error/warning when `brew install` refuses to install a formula from a tap with the same name as an already installed keg HOT 7
- shellenv.sh: csh/tcsh: Broken code for setting envvar MANPATH HOT 1
- Make `autoremove` idempotent HOT 12
- Run xattr -r -d com.apple.quarantine App.app on casks on Apple Silicon MacOS HOT 20
- Homebrew's brew alias is broken after update this morning on Debian machines HOT 2
- Are all of the `undef`s we use really necessary? HOT 27
- HOMEBREW_PIP_INDEX_URL is misleading and does not work-as-intended with some mirrors
- “Error: comparison of PkgVersion with String failed” when running `brew upgrade` HOT 3
- brew upgrade or install fails with comparison of PkgVersion with String HOT 1
- Brew link step fail if installing multiple formulae with common symlink using a system with symlinked /home HOT 6
- golang not update to 1.23.0 HOT 2
- Happened ruby runtime error on macOS Sequoia HOT 2
- Homebrew no longer correctly reads `HOMEBREW_DOCKER_REGISTRY_BASIC_AUTH_TOKEN` from /etc/homebrew/brew.env
- environment file variables are not honored
- `brew install` call `gh attestation verify` Disrespect `XDG_CACHE_HOME` HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from brew.