A PEEK INTO BUILD PROVENANCE FOR HOMEBREW

Summary from the TLDR InfoSec newsletter

Trail of Bits discusses how it has worked to add cryptographically verifiable build provenance for all bottles. This feature ensures that each bottle's content is bound to specific build-time metadata, reducing the risk of compromised or malicious installations. While still in early beta, users can verify attestations using the "brew verify" command, but caution is advised until further development is completed.