Skip to content

Commit ae96a3b

Browse files
committed
build(pkgbuild): reword hint for provenance skip escape hatch
"For offline builds" was too narrow and framed the opt-out as a convenience knob. Rephrase to make the rule explicit: use PDU_SKIP_PROVENANCE_VERIFY only when a failure is unrelated to artifact trust, so users don't treat it as a way to silence real tampering signals.
1 parent 647f54f commit ae96a3b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

  • template/parallel-disk-usage-bin

template/parallel-disk-usage-bin/PKGBUILD

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ prepare() {
4040
for _file in "pdu-$_checksum" "completion.$pkgver.bash" "completion.$pkgver.fish" "completion.$pkgver.zsh"; do
4141
if ! gh attestation verify --repo "$_repo" "$_file"; then
4242
error 'Build provenance verification failed.'
43-
plain 'hint: set PDU_SKIP_PROVENANCE_VERIFY=1 to skip verification (e.g., for offline builds).'
43+
plain 'hint: set PDU_SKIP_PROVENANCE_VERIFY=1 to skip verification for failures unrelated to artifact trust (e.g. transient network errors).'
4444
return 1
4545
fi
4646
done

0 commit comments

Comments
 (0)