Add additional security options for Homebrew cask

See drduh/macOS-Security-and-Privacy-Guide#138
xorcare · Oct 22, 2023 · e1abd51 · e1abd51
1 parent 019f0b8
commit e1abd51
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/home/.exports b/home/.exports
@@ -85,5 +85,11 @@ export GOTELEMETRY=off
 # Prevent Homebrew from collecting analytics.
 export HOMEBREW_NO_ANALYTICS=1
 
+# Forbid redirects from secure HTTPS to insecure HTTP.
+export HOMEBREW_NO_INSECURE_REDIRECT=1
+
+# Require all casks to have a checksum
+export HOMEBREW_CASK_OPTS="--require-sha"
+
 # Means an ohmyzsh installer will not replace an existing .zshrc (default: no)
 export KEEP_ZSHRC=yes