The issue would propose implementing checksum verification for the Homebrew installation script in macos/utils/bootstrap.sh to prevent execution of potentially tampered scripts.
This would include options for downloading to a temp file with verification, using signed installation methods, or pinning to specific commit hashes.
The issue would propose implementing checksum verification for the Homebrew installation script in
macos/utils/bootstrap.shto prevent execution of potentially tampered scripts.This would include options for downloading to a temp file with verification, using signed installation methods, or pinning to specific commit hashes.