Skip to content

Use brew trust osrf/simulation in CI scripts#1508

Merged
scpeters merged 1 commit into
masterfrom
scpeters/tap_trust
Jun 11, 2026
Merged

Use brew trust osrf/simulation in CI scripts#1508
scpeters merged 1 commit into
masterfrom
scpeters/tap_trust

Conversation

@scpeters

@scpeters scpeters commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Homebrew's package descriptions (formulae) are implemented as executable ruby code, which can lead to security issues when using 3rd-party taps, so they have recently added a brew trust command to help mitigate security issues, documented here. It will soon be required to use brew trust osrf/simulation after brew tap osrf/simulation in order to run additional commands like brew install gz-jetty. I have added these commands to our CI scripts to fix brew doctor complaints in CI:

Using release-tools master branch

Build Status https://build.osrfoundation.org/job/gz_rotary_cmake-install_formula-homebrew-amd64/82/

11:12:34 + brew doctor
11:12:35 Please note that these warnings are just used to help the Homebrew maintainers
11:12:35 with debugging if you file an issue. If everything you use Homebrew for is
11:12:35 working fine: please don't worry or file an issue; just ignore this. Thanks!
11:12:35 
11:12:35 Warning: The following taps are not trusted:
11:12:35   osrf/simulation
11:12:35 
11:12:35 Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set.
11:12:35 This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first.
11:12:35 Enable trust checks now with:
11:12:35   export HOMEBREW_REQUIRE_TAP_TRUST=1
11:12:35 Trust specific formulae, casks or commands with:
11:12:35   brew trust --formula <user>/<tap>/<formula>
11:12:35   brew trust --cask <user>/<tap>/<cask>
11:12:35   brew trust --command <user>/<tap>/<command>
11:12:35 or trust installed formulae from these taps with:
11:12:35   brew trust --formula osrf/simulation/gz-rotary-cmake
11:12:35 You can trust all formulae, casks and commands from these taps with:
11:12:35   brew trust osrf/simulation
11:12:35 Prefer trusting only the specific formulae, casks or commands you need.
11:12:35 Untap them with:
11:12:35   brew untap osrf/simulation
11:12:35 To keep allowing them by default during the transition:
11:12:35   export HOMEBREW_NO_REQUIRE_TAP_TRUST=1
11:12:35 This is not recommended and will be removed in a later release.

Using this branch

Build Status https://build.osrfoundation.org/job/gz_rotary_cmake-install_formula-homebrew-amd64/83/

Signed-off-by: Steve Peters <scpeters@intrinsic.ai>
@scpeters

Copy link
Copy Markdown
Contributor Author

this is now required since brew 6.0.0 has been released

@scpeters scpeters merged commit 1bcf848 into master Jun 11, 2026
4 checks passed
@scpeters scpeters deleted the scpeters/tap_trust branch June 11, 2026 13:55

@j-rivero j-rivero left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good to me, sorry for the delay

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants