From c63f02e4153a8edd708bb705c484fd4c04c698cc Mon Sep 17 00:00:00 2001
From: xtqqczze <45661989+xtqqczze@users.noreply.github.com>
Date: Thu, 6 Aug 2026 17:58:09 +0100
Subject: [PATCH] ci: trust preinstalled Homebrew taps on macOS

---
 .github/workflows/CICD.yml |  8 ++++++++
 .github/workflows/l10n.yml | 12 ++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/.github/workflows/CICD.yml b/.github/workflows/CICD.yml
index 72147c4721..99c0882906 100644
--- a/.github/workflows/CICD.yml
+++ b/.github/workflows/CICD.yml
@@ -395,6 +395,10 @@ jobs:
     - uses: actions/checkout@v7.0.1
       with:
         persist-credentials: false
+    # Remove once https://github.com/actions/runner-images/issues/14232 is resolved.
+    - name: Trust preinstalled Homebrew taps
+      run: brew trust aws/tap
+      if: runner.os == 'macOS'
     - name: Avoid no space left on device
       shell: bash
       run: sudo rm -rf /usr/share/dotnet /usr/local/lib/android &
@@ -720,6 +724,10 @@ jobs:
     - uses: actions/checkout@v7.0.1
       with:
         persist-credentials: false
+    # Remove once https://github.com/actions/runner-images/issues/14232 is resolved.
+    - name: Trust preinstalled Homebrew taps
+      run: brew trust aws/tap
+      if: runner.os == 'macOS'
     - uses: taiki-e/install-action@v2
       with:
         tool: nextest,grcov@0.8.24
diff --git a/.github/workflows/l10n.yml b/.github/workflows/l10n.yml
index c081cb297b..3308ffe0c2 100644
--- a/.github/workflows/l10n.yml
+++ b/.github/workflows/l10n.yml
@@ -37,6 +37,10 @@ jobs:
     - uses: actions/checkout@v7.0.1
       with:
         persist-credentials: false
+    # Remove once https://github.com/actions/runner-images/issues/14232 is resolved.
+    - name: Trust preinstalled Homebrew taps
+      run: brew trust aws/tap
+      if: runner.os == 'macOS'
     - uses: taiki-e/install-action@nextest
     - uses: Swatinem/rust-cache@v2
     - name: Run sccache-cache
@@ -410,6 +414,10 @@ jobs:
     - uses: actions/checkout@v7.0.1
       with:
         persist-credentials: false
+    # Remove once https://github.com/actions/runner-images/issues/14232 is resolved.
+    - name: Trust preinstalled Homebrew taps
+      run: brew trust aws/tap
+      if: runner.os == 'macOS'
     - uses: Swatinem/rust-cache@v2
     - name: Run sccache-cache
       id: sccache-setup
@@ -563,6 +571,10 @@ jobs:
     - uses: actions/checkout@v7.0.1
       with:
         persist-credentials: false
+    # Remove once https://github.com/actions/runner-images/issues/14232 is resolved.
+    - name: Trust preinstalled Homebrew taps
+      run: brew trust aws/tap
+      if: runner.os == 'macOS'
     - uses: Swatinem/rust-cache@v2
     - name: Run sccache-cache
       id: sccache-setup