Merge pull request #12377 from nihaals/verified-url-hostname

Improve `verified:` docs in cask cookbook
This commit is contained in:
Mike McQuaid 2021-11-04 09:42:46 +00:00 committed by GitHub
commit eca16a2a39
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1115,7 +1115,7 @@ Example of using `header:`: [issue-325182724](https://github.com/Homebrew/brew/p
#### When URL and Homepage Hostnames Differ, Add `verified:`
When the hostnames of `url` and `homepage` differ, the discrepancy should be documented with the `verified:` parameter, repeating the smallest possible portion of the URL that uniquely identifies the app or vendor, excluding the protocol. Example: [`shotcut.rb`](https://github.com/Homebrew/homebrew-cask/blob/08733296b49c59c58b6beeada59ed4207cef60c3/Casks/shotcut.rb#L5L6).
When the domains of `url` and `homepage` differ, the discrepancy should be documented with the `verified:` parameter, repeating the smallest possible portion of the URL that uniquely identifies the app or vendor, excluding the protocol. Example: [`shotcut.rb`](https://github.com/Homebrew/homebrew-cask/blob/08733296b49c59c58b6beeada59ed4207cef60c3/Casks/shotcut.rb#L5L6).
This must be added so a user auditing the cask knows the URL was verified by the Homebrew Cask team as the one provided by the vendor, even though it may look unofficial. It is our responsibility as Homebrew Cask maintainers to verify both the `url` and `homepage` information when first added (or subsequently modified, apart from versioning).