When installing CFN Nag via Homebrew a warning about validating integrity occurs:
$ brew gem install cfn-nag
==> Fetching cfn-nag from gem source
Downloaded cfn-nag-0.8.10
Warning: Cannot verify integrity of 'cfn-nag-0.8.10.gem'.
No checksum was provided for this resource.
For your reference, the checksum is:
sha256 "052aea03f2cd92ff34ea51a2e8fe287b4489dc4c57f04d1ca6e5855fe325d333"
==> /usr/local/opt/ruby/bin/gem install /Users/adgygzz/Library/Caches/Homebrew/cfn-nag-0.8.1
🍺 /usr/local/Cellar/gem-cfn-nag/0.8.10: 1,252 files, 9.7MB, built in 15 seconds
==> Running `brew cleanup gem-cfn-nag`...
This makes it less appealing for organizations using a secure software supply chain to adopt the tool.
When installing CFN Nag via Homebrew a warning about validating integrity occurs:
This makes it less appealing for organizations using a secure software supply chain to adopt the tool.