From 2e8c0e73d6b6730cfeb4c2fa6d2c07ddab872da0 Mon Sep 17 00:00:00 2001 From: Mark Boyd Date: Mon, 8 Apr 2024 12:22:29 -0400 Subject: [PATCH] update xattr command for trusting the fly CLI to use a subshell for getting the homebrew prefix --- .github/ISSUE_TEMPLATE/onboard-compliance.md | 2 +- .github/ISSUE_TEMPLATE/onboard-engineer.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/onboard-compliance.md b/.github/ISSUE_TEMPLATE/onboard-compliance.md index 2b013a1..88a8f4d 100644 --- a/.github/ISSUE_TEMPLATE/onboard-compliance.md +++ b/.github/ISSUE_TEMPLATE/onboard-compliance.md @@ -130,7 +130,7 @@ Your onboarding buddy will create a separate ticket tied to this one to track th - As a cloud.gov team member, you should have a long list of organizations - If you have none or one (e.g. sandbox) org, please reach out to your onboarding buddy - [ ] Configure `aws-vault` by [following our directions](https://cloud.gov/docs/ops/secrets/#aws-credentials) -- [ ] Fix `fly`, the Concourse CLI, by running `xattr -d com.apple.quarantine /opt/homebrew/bin/fly`. Concourse does not sign `fly` with an Apple Developer account, so you must use `xattr` to manually remove the binary from quarantine. Verify by running `fly -h` in your command line. +- [ ] Fix `fly`, the Concourse CLI, by running `xattr -d com.apple.quarantine $(brew --prefix)/bin/fly`. Concourse does not sign `fly` with an Apple Developer account, so you must use `xattr` to manually remove the binary from quarantine. Verify by running `fly -h` in your command line. - [ ] Install cloud.gov dev tools by cloning the [`cg-scripts` repo](https://github.com/cloud-gov/cg-scripts/): run `git clone https://github.com/cloud-gov/cg-scripts.git` in your command line ## Security and Compliance News diff --git a/.github/ISSUE_TEMPLATE/onboard-engineer.md b/.github/ISSUE_TEMPLATE/onboard-engineer.md index 7a40b7c..cb4825a 100644 --- a/.github/ISSUE_TEMPLATE/onboard-engineer.md +++ b/.github/ISSUE_TEMPLATE/onboard-engineer.md @@ -154,7 +154,7 @@ You are a member of the Cloud Operations team, which means you have additional a - As a cloud.gov team member, you should have a long list of organizations - If you have none or one (e.g. sandbox) org, please reach out to your onboarding buddy - [ ] Configure `aws-vault` by [following our directions](https://cloud.gov/docs/ops/secrets/#aws-credentials) -- [ ] Fix `fly`, the Concourse CLI, by running `xattr -d com.apple.quarantine /opt/homebrew/bin/fly`. Concourse does not sign `fly` with an Apple Developer account, so you must use `xattr` to manually remove the binary from quarantine. Verify by running `fly -h` in your command line. +- [ ] Fix `fly`, the Concourse CLI, by running `xattr -d com.apple.quarantine $(brew --prefix)/bin/fly`. Concourse does not sign `fly` with an Apple Developer account, so you must use `xattr` to manually remove the binary from quarantine. Verify by running `fly -h` in your command line. - [ ] Install cloud.gov dev tools by cloning the [`cg-scripts` repo](https://github.com/cloud-gov/cg-scripts/): run `git clone https://github.com/cloud-gov/cg-scripts.git` in your command line ### Figure out your first tasks