From 99eda8f8d9b0cec0d193167569e47c04b60d442f Mon Sep 17 00:00:00 2001
From: Ivo Liondov <ivo.liondov@approov.io>
Date: Sun, 2 Aug 2026 19:21:58 +0100
Subject: [PATCH] chore: take binaries from approov-cli releases

The tap currently hosts its own release tarballs and the formula points at
them, so it is doing two jobs. Binaries now come from the approov/approov-cli
release repository, published alongside the Windows and Linux packages with
checksums and a detached PGP signature, and this tap holds only the formula.

The old single tarball carried Linux/approov and MacOS/approov; the new
releases ship one tarball per platform with a bare approov at the root, so
the install block becomes per-OS. macOS is a universal binary, so Apple
silicon and Intel share one url and checksum.
---
 README.md  |  9 +++++++--
 approov.rb | 44 +++++++++++++++++++++++++++++++-------------
 2 files changed, 38 insertions(+), 15 deletions(-)

diff --git a/README.md b/README.md
index 4e6c49d..2022ff4 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,8 @@
 # Approov CLI from Homebrew
 
-This repo holds the Approov CLI binaries for deployment to Homebrew
+This repo holds the Homebrew **formula** for the Approov CLI. The binaries themselves are
+published in [approov/approov-cli](https://github.com/approov/approov-cli/releases) alongside
+the Windows and Linux packages, and are signed with checksums and a detached PGP signature.
 
 To install use:
 
@@ -9,7 +11,10 @@ brew update
 brew install approov/cli/approov
 ```
 
-The latest binaries can also be downloaded directly from https://approov.io/downloads/approovcli.zip
+Direct downloads for every platform, with verification instructions, are at
+https://github.com/approov/approov-cli/releases/latest
+
+Questions or problems: support@approov.io
 
 # Approov CLI  
 
diff --git a/approov.rb b/approov.rb
index b74308a..79a3760 100644
--- a/approov.rb
+++ b/approov.rb
@@ -1,21 +1,39 @@
+# Homebrew formula for the Approov CLI.
+#
+# Binaries come from the approov/approov-cli release repository; this tap holds only the
+# formula. Update by bumping `version` and replacing both sha256 values with the matching
+# lines from that release's SHA256SUMS:
+#
+#     curl -fL https://github.com/approov/approov-cli/releases/download/v<ver>/SHA256SUMS
+#
+# The release pipeline opens that PR automatically for each new version.
+
 class Approov < Formula
-  desc "Approov CLI tool"
-  tag  = "3.6.0"
-  homepage "https://github.com/approov/homebrew-cli"
-  url "https://github.com/approov/homebrew-cli/releases/download/" + tag + "/approov-" + tag + ".tar.gz"
-  sha256  "bba03cfa75ed7c38f7554bf1676ab1ac654686245a77037c73054bfd4f55c04d"
+  desc "Administration and integration tooling for the Approov mobile app attestation service"
+  homepage "https://approov.io"
+  version "3.6.1"
+  # Commercial licence — no SPDX identifier applies.
+  license :cannot_represent
 
-  #bottle :unneeded
-  def install
-    on_linux do
-      bin.install "Linux/approov"
-    end
-    on_macos do
-      bin.install "MacOS/approov"
+  on_macos do
+    # Universal build: one binary serves both arm64 and x86_64.
+    url "https://github.com/approov/approov-cli/releases/download/v#{version}/approov-#{version}-darwin-universal.tar.gz"
+    sha256 "5ffbac49fdc774a105d3e3a1127f3152d249a99741d8c6d3a5a8b8b4a37c0b52"
+  end
+
+  on_linux do
+    on_intel do
+      url "https://github.com/approov/approov-cli/releases/download/v#{version}/approov-#{version}-linux-amd64.tar.gz"
+      sha256 "cf537a221784bc7616a3d9f845f7979178b552f00ceb22c1f37326fd94947092"
     end
+    # No arm64 Linux build is published yet; add an on_arm block here when one ships.
+  end
+
+  def install
+    bin.install "approov"
   end
 
   test do
-    system "#{bin}/approov", "--version"
+    assert_match version.to_s, shell_output("#{bin}/approov --version")
   end
 end