Git Product home page Git Product logo

Comments (5)

pemako avatar pemako commented on September 15, 2024

I have the same problem.

brew config

HOMEBREW_VERSION: 4.3.9-307-g4aae003
ORIGIN: https://github.com/Homebrew/brew
HEAD: 4aae003a1a9caa4a5b22c3c9c23afd6b1ef58a0f
Last commit: 2 hours ago
Core tap HEAD: 613a2fcb6a1c91812563572d3baddcccafa6b8d1
Core tap last commit: 16 minutes ago
Core tap JSON: 18 Jul 05:06 UTC
Core cask tap HEAD: 988fe00e1ae18077a05121361f2917bab5123135
Core cask tap last commit: 2 hours ago
Core cask tap JSON: 18 Jul 05:06 UTC
HOMEBREW_PREFIX: /usr/local
HOMEBREW_CASK_OPTS: []
HOMEBREW_EDITOR: vim
HOMEBREW_GITHUB_API_TOKEN: set
HOMEBREW_MAKE_JOBS: 8
HOMEBREW_NO_AUTO_UPDATE: set
HOMEBREW_SORBET_RUNTIME: set
all_proxy: socks5://127.0.0.1:7890
http_proxy: http://127.0.0.1:7890
https_proxy: http://127.0.0.1:7890
Homebrew Ruby: 3.3.4 => /usr/local/Homebrew/Library/Homebrew/vendor/portable-ruby/3.3.4/bin/ruby
CPU: octa-core 64-bit haswell
Clang: 14.0.0 build 1400
Git: 2.45.2 => /usr/local/bin/git
Curl: 8.1.2 => /usr/bin/curl
macOS: 12.7.2-x86_64
CLT: 14.2.0.0.1.1668646533
Xcode: N/A

What happened

brew install bat
==> Downloading https://ghcr.io/v2/homebrew/core/bat/manifests/0.24.0_1
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/625e1a19c4e2949f7f24225b44af06a2bd2b1acd908be96c3017c940bc7c9354--bat-0.24.0_1.bottle_manifest.json
==> Fetching dependencies for bat: [email protected]
==> Downloading https://ghcr.io/v2/homebrew/core/libgit2/1.7/manifests/1.7.2
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/ecde05510a65fdaed70342439974074fb291160fa39ed3be025e2590f1a12133--libgit2@1.7-1.7.2.bottle_manifest.json
==> Fetching [email protected]
==> Downloading https://ghcr.io/v2/homebrew/core/libgit2/1.7/blobs/sha256:d7c8dea4ca2f97faf4e37e618f469181d0c128208518b33fee1af1c60a86a301
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/2a5a379561e3f13bad2b64abd536a7c02104076dd1a3e11604be7e92b785e5e9--libgit2@1.7--1.7.2.monterey.bottle.tar.gz
==> Fetching bat
==> Downloading https://ghcr.io/v2/homebrew/core/bat/blobs/sha256:14e1b6003fd419f35f525667d4997c42fc044f85709563c3f02833ecbb98e3dc
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/286bf03fac7a873ac2ea2f6c3462f8922bb9d202fbb538519f1023fa793b6ae0--bat--0.24.0_1.monterey.bottle.tar.gz
==> Installing dependencies for bat: [email protected]
==> Installing bat dependency: [email protected]
==> Downloading https://ghcr.io/v2/homebrew/core/libgit2/1.7/manifests/1.7.2
Already downloaded: /Users/mako/Library/Caches/Homebrew/downloads/ecde05510a65fdaed70342439974074fb291160fa39ed3be025e2590f1a12133--libgit2@1.7-1.7.2.bottle_manifest.json
==> Verifying attestation for [email protected]
Error: The bottle for [email protected] has an invalid build provenance attestation.

This may indicate that the bottle was not produced by the expected
tap, or was maliciously inserted into the expected tap's bottle
storage.

Additional context:

attestation verification failed: Failure while executing; `/usr/bin/env GH_TOKEN=****** /usr/local/bin/gh attestation verify /Users/mako/Library/Caches/Homebrew/downloads/2a5a379561e3f13bad2b64abd536a7c02104076dd1a3e11604be7e92b785e5e9--libgit2@1.7--1.7.2.monterey.bottle.tar.gz --repo trailofbits/homebrew-brew-verify --format json` exited with 1. Here's the output:

Error: failed to fetch attestations from trailofbits/homebrew-brew-verify: HTTP 401: Bad credentials (https://api.github.com/repos/trailofbits/homebrew-brew-verify/attestations/sha256:d7c8dea4ca2f97faf4e37e618f469181d0c128208518b33fee1af1c60a86a301?per_page=30)

from brew.

holymonson avatar holymonson commented on September 15, 2024

Via bisecting, it should blame 570cf65, cc @woodruffw
Attestation was triggered even HOMEBREW_DEVELOPER and HOMEBREW_VERIFY_ATTESTATIONS are NOT set.

from brew.

holymonson avatar holymonson commented on September 15, 2024

Seems should also blame b8ff4b3 and 5771c2f, cc @MikeMcQuaid
Setting HOMEBREW_NO_VERIFY_ATTESTATIONS=1 will temporarily solve this issue, but @MikeMcQuaid you may need to adjust the enable? logic later.

from brew.

pemako avatar pemako commented on September 15, 2024

HOMEBREW_NO_VERIFY_ATTESTATIONS

It work for me.

from brew.

woodruffw avatar woodruffw commented on September 15, 2024

If you're experiencing attestation failures, please follow up on this thread: Homebrew/homebrew-core#177384

from brew.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.