From 0ac7db00525b861bff1c7e7e63c1e5a18907c06d Mon Sep 17 00:00:00 2001 From: Vishal Rana Date: Thu, 5 Nov 2026 20:10:39 -0800 Subject: [PATCH] docs: trust Homebrew tap before installing onebox --- README.md | 6 +++++- site/src/content/docs/docs/get-started/install.mdx | 9 ++++++--- site/src/content/docs/docs/reference/capabilities.mdx | 6 +++--- 3 files changed, 14 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 51ef551d..72cfa000 100644 --- a/README.md +++ b/README.md @@ -64,11 +64,15 @@ Homebrew, Scoop, release archives, and Debian/RPM packages are available. The verification and source builds. ```sh -brew install labstack/tap/onebox # macOS or Linux +brew tap labstack/tap # macOS or Linux +brew trust --tap labstack/tap +brew install labstack/tap/onebox scoop install labstack/onebox # Windows ob version ``` +Homebrew 7 requires explicit trust for non-official taps on both macOS and Linux. + ### 2. Declare the application Starting from an existing Compose project, `ob init` writes the first draft. diff --git a/site/src/content/docs/docs/get-started/install.mdx b/site/src/content/docs/docs/get-started/install.mdx index ec502e69..f655c8f3 100644 --- a/site/src/content/docs/docs/get-started/install.mdx +++ b/site/src/content/docs/docs/get-started/install.mdx @@ -24,14 +24,17 @@ Set `version` to the release without its leading `v`. The asset name uses that value, while the download URL uses the full `vYYYY.M.REVISION-alpha` tag. - + ```sh + brew tap labstack/tap + brew trust --tap labstack/tap brew install labstack/tap/onebox ``` - Homebrew verifies the archive digest. The installed `ob` binary is signed - with LabStack's Developer ID and accepted by Apple's notarization service. + Homebrew 7 requires explicit trust for non-official taps on both macOS and Linux. + Homebrew verifies the archive digest. On macOS, the installed `ob` binary is + signed with LabStack's Developer ID and accepted by Apple's notarization service. diff --git a/site/src/content/docs/docs/reference/capabilities.mdx b/site/src/content/docs/docs/reference/capabilities.mdx index 5f9d84ac..fd187baf 100644 --- a/site/src/content/docs/docs/reference/capabilities.mdx +++ b/site/src/content/docs/docs/reference/capabilities.mdx @@ -71,9 +71,9 @@ install commands work from the first published tag onward. architectures. - A Scoop bucket manifest for Windows amd64 and arm64, published only after the same release verification gate succeeds. -- A Homebrew Cask for macOS amd64 and arm64. Both macOS binaries are signed with - LabStack's Developer ID and accepted by Apple's notarization service before - publication. +- A Homebrew Cask for macOS and Linux on amd64 and arm64. Both macOS binaries are + signed with LabStack's Developer ID and accepted by Apple's notarization + service before publication. ## Distribution not shipped