Use tap trust for eval all

[MikeMcQuaid]

• Make HOMEBREW_REQUIRE_TAP_TRUST and
  HOMEBREW_NO_REQUIRE_TAP_TRUST enable commands that evaluate all
  formulae and casks.
• Hide --eval-all and HOMEBREW_EVAL_ALL from generated help,
  completions and configuration unless the env var is set directly.
• Keep legacy HOMEBREW_EVAL_ALL working with a deprecation warning
  so callers can move to the trust model.

---

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you added an explanation of what your changes do and why you'd like us to include them? Performance claims (e.g. "this is faster") must include Hyperfine benchmarks.
• Have you written new tests (excluding integration tests) for your changes? Here's an example.
• Have you successfully run brew lgtm (style, typechecking and tests) with your changes locally?

---

• AI was used to generate or assist with generating this PR.

OpenAI Codex 5.5 xhigh with local review and extensive manual testing.

---

[Copilot]

Pull request overview

This PR shifts “evaluate all formulae/casks” behavior away from the legacy --eval-all / HOMEBREW_EVAL_ALL mechanism toward the tap-trust model, while keeping the legacy path working but de-emphasized.

Changes:

• Make HOMEBREW_REQUIRE_TAP_TRUST and HOMEBREW_NO_REQUIRE_TAP_TRUST enable “eval all” behavior (Homebrew::EnvConfig.eval_all?) and add a deprecation warning for HOMEBREW_EVAL_ALL.
• Hide --eval-all and HOMEBREW_EVAL_ALL from manpage/docs/completions/config output unless directly set, and update commands to use args.eval_all? || Homebrew::EnvConfig.eval_all?.
• Expose/document brew trust and brew untrust and update related tests and TestBot logic.

Reviewed changes

Copilot reviewed 36 out of 36 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
manpages/brew.1	Removes --eval-all docs from multiple commands; documents trust/untrust; documents new env vars.
Library/Homebrew/test/formula_spec.rb	Adds coverage for Formula.all when tap-trust mode is enabled.
Library/Homebrew/test/env_config_spec.rb	Adds unit tests for EnvConfig.eval_all? including deprecation warning behavior.
Library/Homebrew/test/cmd/uses_spec.rb	Updates uses tests to rely on tap-trust env vars instead of --eval-all.
Library/Homebrew/test/cmd/desc_spec.rb	Updates desc --search tests for the new tap-trust gating/error messaging.
Library/Homebrew/test/cmd/config_spec.rb	Verifies hidden env behavior (don’t print HOMEBREW_EVAL_ALL unless directly set).
Library/Homebrew/test/cask/cask_spec.rb	Adds coverage for Cask::Cask.all when trust checks are disabled via env var.
Library/Homebrew/test_bot/test_formulae.rb	Adds helper to set trust requirements/environment for TestBot runs.
Library/Homebrew/test_bot/formulae.rb	Updates TestBot’s brew uses invocation to use the tap-trust env instead of --eval-all.
Library/Homebrew/test_bot/formulae_dependents.rb	Updates dependent enumeration to use the tap-trust env instead of --eval-all.
Library/Homebrew/system_config.rb	Skips printing hidden env vars unless they are directly present in ENV.
Library/Homebrew/search.rb	Updates --desc search behavior to treat tap-trust env vars as enabling “eval all”.
Library/Homebrew/formula.rb	Updates Formula.all gating/error message to reference tap-trust env vars.
Library/Homebrew/env_config.rb	Deprecates/hides HOMEBREW_EVAL_ALL, adds eval_all? custom implementation, updates env descriptions.
Library/Homebrew/dev-cmd/unbottled.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/dev-cmd/livecheck.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/dev-cmd/determine-test-runners.rb	Hides legacy --eval-all and adjusts eval-all logic (but needs a runtime guard fix; see comments).
Library/Homebrew/dev-cmd/bump.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/dev-cmd/audit.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates odisabled guidance.
Library/Homebrew/commands.rb	Filters hidden options out of conflict metadata (for help/completions generation).
Library/Homebrew/cmd/uses.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/cmd/untrust.rb	Makes untrust visible in manpage by removing hide_from_man_page!.
Library/Homebrew/cmd/trust.rb	Makes trust visible in manpage by removing hide_from_man_page!.
Library/Homebrew/cmd/tap.rb	Uses tap-trust-based “verify/eval-all” behavior; hides legacy --eval-all.
Library/Homebrew/cmd/search.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/cmd/readall.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/cmd/options.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/cmd/info.rb	Uses tap-trust-based eval_all? for JSON; hides legacy --eval-all.
Library/Homebrew/cmd/desc.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates usage errors.
Library/Homebrew/cmd/deps.rb	Uses tap-trust-based eval_all?; hides legacy --eval-all; updates --for-each description.
Library/Homebrew/cask/cask.rb	Updates Cask::Cask.all gating/error message to reference tap-trust env vars.
docs/Manpage.md	Mirrors manpage changes: removes --eval-all docs, adds trust/untrust, adds env var docs.
completions/zsh/_brew	Adds trust/untrust and removes --eval-all completions/constraints.
completions/internal_commands_list.txt	Adds trust and untrust to internal command list.
completions/fish/brew.fish	Adds trust/untrust and removes --eval-all completions.
completions/bash/brew	Adds trust/untrust and removes --eval-all completions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-code-quality]

Code Coverage Overview

Languages: Ruby

Ruby / code-coverage/simplecov

The overall coverage in the tap-trust-eval-all branch remains at 78%, unchanged from the env-config-truthy-bo... branch.

Show a code coverage summary of the most impacted files.

File	env-config-truthy-bo... 7470da6	tap-trust-eval-all 848a24c	+/-
cmd/casks.rb	100%	80%	-20%
cmd/formulae.rb	100%	80%	-20%
cmd/untrust.rb	100%	85%	-15%
cmd/trust.rb	100%	94%	-6%
commands.rb	88%	88%	0%
test_bot/test_formulae.rb	37%	38%	+1%
cmd/uninstall.rb	75%	76%	+1%
diagnostic.rb	51%	53%	+2%
trust.rb	85%	88%	+3%
search.rb	82%	85%	+3%

---

_{Updated May 31, 2026 18:08 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.}

[Copilot]

Pull request overview

Copilot reviewed 67 out of 67 changed files in this pull request and generated 2 comments.