Skip to content

"Attestation verification failed" when using brew to install #127

@laal28

Description

@laal28

i was trying to install package with brew: brew install viu
But got this message:

==> Downloading https://ghcr.io/v2/homebrew/core/viu/manifests/1.5.0
######################################################################### 100.0%
==> Fetching viu
==> Downloading https://ghcr.io/v2/homebrew/core/viu/blobs/sha256:0c7901a2d48ca4
######################################################################### 100.0%
==> Verifying attestation for viu
Error: The bottle for viu has an invalid build provenance attestation.

This may indicate that the bottle was not produced by the expected
tap, or was maliciously inserted into the expected tap's bottle
storage.

Additional context:

attestation verification failed: Failure while executing; `/usr/bin/env GH_TOKEN=****** GH_HOST=github.com /usr/local/bin/gh attestation verify /Users/pivo/Library/Caches/Homebrew/downloads/2d16a7e22c0060a17fd4c14532e4da1718c1fd6a8d904cd6bc047efb31583e5a--viu--1.5.0.monterey.bottle.tar.gz --repo Homebrew/homebrew-core --format json` exited with 1. Here's the output:
unknown command "attestation" for "gh"

Usage:  gh <command> <subcommand> [flags]

Available commands:
  alias
  api
  auth
  browse
  codespace
  completion
  config
  extension
  gist
  gpg-key
  help
  issue
  label
  org
  pr
  release
  repo
  run
  search
  secret
  ssh-key
  status
  variable
  workflow

Specs:
MacOS Monterey 12.4

Homebrew 4.3.17-23-gf82945f
Homebrew/homebrew-core (git revision ae06d824700; last commit 2023-02-13)
Homebrew/homebrew-cask (git revision ce9e4ba623; last commit 2023-02-13)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions