Homebrew / homebrew-core

🍻 Default formulae for the missing package manager for macOS (or Linux)
https://brew.sh
BSD 2-Clause "Simplified" License
13.68k stars 12.38k forks source link

brew install zsh-completions fails (no attestation) #193723

Closed ksylvan closed 2 hours ago

ksylvan commented 4 hours ago

brew gist-logs <formula> link OR brew config AND brew doctor output

$ brew config

text
HOMEBREW_VERSION: 4.4.0-119-g587949b
ORIGIN: https://github.com/Homebrew/brew
HEAD: 587949bd8417c486795be04194f9e9baeaa9f5a7
Last commit: 9 hours ago
Core tap JSON: 11 Oct 02:58 UTC
Core cask tap JSON: 11 Oct 02:58 UTC
HOMEBREW_PREFIX: /opt/homebrew
HOMEBREW_CASK_OPTS: []
HOMEBREW_MAKE_JOBS: 14
HOMEBREW_SORBET_RUNTIME: set
Homebrew Ruby: 3.3.5 => /opt/homebrew/Library/Homebrew/vendor/portable-ruby/3.3.5/bin/ruby
CPU: 14-core 64-bit arm_palma
Clang: 15.0.0 build 1500
Git: 2.47.0 => /opt/homebrew/bin/git
Curl: 8.7.1 => /usr/bin/curl
macOS: 14.6.1-arm64
CLT: 15.3.0.0.1.1708646388
Xcode: 16.0
Rosetta 2: false

$ brew doctor

Your system is ready to brew.

Verification

What were you trying to do (and why)?

Install zsh-completions

What happened (include all command output)?

==> Downloading https://ghcr.io/v2/homebrew/core/zsh-completions/manifests/0.35.0
############################################################################################## 100.0%
==> Fetching zsh-completions
==> Downloading https://ghcr.io/v2/homebrew/core/zsh-completions/blobs/sha256:3a9005c599c91337f5d8689
############################################################################################## 100.0%
==> Verifying attestation for zsh-completions
Warning: Failed to verify attestation. Retrying in 1s...
Warning: Failed to verify attestation. Retrying in 3s...
Warning: Failed to verify attestation. Retrying in 9s...
Warning: Failed to verify attestation. Retrying in 27s...
Warning: Failed to verify attestation. Retrying in 81s...
Error: The bottle for zsh-completions has an invalid build provenance attestation.

This may indicate that the bottle was not produced by the expected
tap, or was maliciously inserted into the expected tap's bottle
storage.

Additional context:

no attestation matches subject: 8b84c249cbb7c07b8f047110a4b09300f5184ce335f50756e904739b0f773280--zsh-completions--0.35.0.all.bottle.tar.gz

What did you expect to happen?

Intall zsh-completions

Step-by-step reproduction instructions (by running brew commands)

Just try to install it:

brew install zsh-completions
ZhongRuoyu commented 2 hours ago

This should be fixed now; please run brew update and try again.

You may need to wait for up to 30 minutes from when this issue was closed.