docs: Update Homebrew install for Tap Trust (Homebrew 6.0)#1427
docs: Update Homebrew install for Tap Trust (Homebrew 6.0)#1427Beehtrix wants to merge 2 commits into
Conversation
Use fully qualified cask for scoped trust under Homebrew 6.0 Tap Trust.
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Updates the Homebrew installation instructions in the README to use fully-qualified cask names, eliminating the need for a separate brew tap step.
Changes:
- Replace
brew tap entireio/tap+brew installwith a single fully-qualifiedbrew install --cask entireio/tap/...command for stable and nightly.
The Quick Start block was updated to the fully-qualified cask (entireio/tap/entire) for Homebrew 6.0 Tap Trust, but the Release Channels section still listed the un-qualified `brew install --cask entire`, which would hit the same trust prompt. Qualify both here too. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Entire-Checkpoint: 1f6ea3e0b1c4
|
Thanks for the contribution. I updated other places in docs too. But when testing it I did run into the issue that because we use |
Hey @Soph - thanks for getting back on this and appreciate you looking into it! I also proposed something here on the tap itself: entireio/homebrew-tap#4 but yeah, for what it’s worth, I'm hoping the docs change here still seems like an improvement for the common “pick one channel and install it once” path under Tap Trust, since fully‑qualified casks work as documented there. The Let me know if I can help in any way! :) |
Use fully qualified cask for scoped trust under Homebrew 6.0 Tap Trust.
Description
Homebrew 6.0.0 introduced a new "Tap Trust" security model that requires explicit trust for third-party taps before their code is evaluated. The existing instructions use
brew tapfollowed bybrew install, which now triggers trust prompts when tap trust is required.Changes
Updated the macOS Homebrew installation snippet to use the fully-qualified cask path:
Stable
Nightly
This matches Homebrew's Tap Trust documentation, which states that installing a fully-qualified formula or cask (
user/repo/name) trusts only that item and allows it to be installed even when tap trust is enforced.Why this is needed
Using the fully-qualified cask (
entireio/tap/entire) gives scoped trust to theentirecask without requiring users to trust the entire tap. This avoids new Tap Trust warning prompts and keeps the install command simple for new users.