`brew` binary is not code-signed

[xtqqczze]

When checking the code signature of Homebrew’s binary on macOS, it reports that it is not signed:

% codesign -dvvv /opt/homebrew/bin/brew
/opt/homebrew/bin/brew: code object is not signed at all

Steps to reproduce

1. Install Homebrew.
2. Run codesign -dvvv /opt/homebrew/bin/brew.

Expected behavior
brew should be signed by Homebrew or at least provide some signature verification.

Actual behavior
The binary is not signed at all.

Environment

• macOS version: 15.7.1
• Homebrew version: 4.6.16-24-gafdef01
• Installation path: /opt/homebrew/bin/brew

[SMillerDev]

That has nothing to do with casks, and as far as I know there is no way to sign things that aren't binaries. The brew binary is a shell script. The installer is signed and notarized.

[xtqqczze]

Opened Homebrew/brew#20826

[xtqqczze]

The brew binary is a shell script

My mistake, Finder described the file type as a "Unix Executable File", likely because it doesn’t have a typical shell script extension.

That said, it can still be signed without issue:

codesign -s - /opt/homebrew/bin/brew

[gromgit]

That said, it can still be signed without issue:

And the signatures disappear on the next edit, because pretty much all editors will replace the original with a new file anyway.