From 06a73fc05d5f75a9fe927fd658b6bf7307787512 Mon Sep 17 00:00:00 2001
From: Brian Lockwood <lockwobr@gmail.com>
Date: Wed, 10 Jun 2026 13:13:31 -0700
Subject: [PATCH] fix: broken attestation workflow

---
 .github/workflows/build-attested.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/build-attested.yaml b/.github/workflows/build-attested.yaml
index a355b5910..35dd43961 100644
--- a/.github/workflows/build-attested.yaml
+++ b/.github/workflows/build-attested.yaml
@@ -75,6 +75,11 @@ jobs:
       - name: Build and attest
         env:
           GOFLAGS: -mod=vendor
+          # The brews pipe templates {{ .Env.HOMEBREW_DEPLOY_KEY }}; goreleaser
+          # errors on a missing env key. Provide it empty so skip_upload evaluates
+          # true and the Homebrew tap publish is skipped. on-tag.yaml supplies the
+          # real secret for production releases.
+          HOMEBREW_DEPLOY_KEY: ""
         run: |
           set -euo pipefail
           goreleaser release --snapshot --clean --skip=publish,ko,sbom --timeout 20m