ssh-audit manifest etc. is unauthorized

[johnlockhart]

Output of brew config

HOMEBREW_VERSION: 6.0.8-2-g988192e
ORIGIN: https://github.com/Homebrew/brew
HEAD: 988192e5557150f69736dfdd314d8d69e5cca502
Last commit: 10 hours ago
Branch: main
Core tap: N/A
Core cask tap: N/A
HOMEBREW_PREFIX: /opt/homebrew
HOMEBREW_AUTO_UPDATE_SECS: 3600
HOMEBREW_BAT: set
HOMEBREW_BROWSER: /Users/user/bin/darwin/firefox-dev
HOMEBREW_CASK_OPTS: ["--appdir=/Applications"]
HOMEBREW_CLEANUP_PERIODIC_FULL_DAYS: 3
HOMEBREW_DOWNLOAD_CONCURRENCY: 28
HOMEBREW_EDITOR: /opt/homebrew/bin/nvim
HOMEBREW_FORBID_PACKAGES_FROM_PATHS: set
HOMEBREW_GITHUB_API_TOKEN: set
HOMEBREW_MAKE_JOBS: 14
HOMEBREW_NO_ANALYTICS: set
HOMEBREW_REQUIRE_TAP_TRUST: set
Homebrew Ruby: 4.0.5 => /opt/homebrew/Library/Homebrew/vendor/portable-ruby/4.0.5_1/bin/ruby
CPU: 14-core 64-bit arm_brava
Clang: 21.0.0 build 2100
Git: 2.55.0 => /opt/homebrew/bin/git
Curl: 8.7.1 => /usr/bin/curl
macOS: 26.5.2-arm64
CLT: 26.6.0.0.1781586589
Xcode: 26.5
Metal Toolchain: N/A
Rosetta 2: false

Output of brew doctor

Please note that these warnings are just used to help the Homebrew maintainers
with debugging if you file an issue. If everything you use Homebrew for is
working fine: please don't worry or file an issue; just ignore this. Thanks!

Warning: Some installed formulae are deprecated or disabled.
You should find replacements for the following formulae:
  icu4c@77

Description of issue

Attempting to install ssh-audit fails with a curl 404 error:

$ brew install ssh-audit
✔︎ JSON API packages.arm64_tahoe.jws.json             Downloaded   15.2MB/ 15.2MB
==> Would install 1 formula:
ssh-audit
==> Downloading https://ghcr.io/v2/homebrew/core/ssh-audit/manifests/3.9.0-1
curl: (56) The requested URL returned error: 404

==> Fetching downloads for: ssh-audit
✔︎ Bottle ssh-audit (3.9.0)                           Preparing   107.9KB/107.9KB
==> Pouring ssh-audit--3.9.0.all.bottle.1.tar.gz
Error: /opt/homebrew/Cellar/ssh-audit/3.9.0 is not a directory

If one visits the URL https://ghcr.io/v2/homebrew/core/ssh-audit/manifests/3.9.0-1 directly, it returns UNAUTHORIZED authentication required.

If one goes to the formula URL https://formulae.brew.sh/api/formula/ssh-audit.json then clicks on the URL at bottle.stable.files.all.url, https://ghcr.io/v2/homebrew/core/ssh-audit/blobs/sha256:1ac5df2410976a103b41d73e25db9056a6b50c71a266a32047a6cefd253f04e6, that also returns UNAUTHORIZED.

[p-linnane]

The UNAUTHORIZED is GitHub Packages working as expected. You cannot just navigate to those URLs in a web browser.

The underlying issue is due to a mistake in Homebrew/homebrew-core#291487. We're looking into it.

[johnlockhart]

Thank you. I didn't realize those URLs were protected.

[carlocab]

This should be fixed now. Try doing

brew reinstall ssh-audit

Note that you'll still see UNAUTHORIZED if you try to visit the download URLs directly. As mentioned above: that's expected.

[johnlockhart]

ssh-audit installed and working properly now! Thank you!!