Skip to content

Inaccurate install instructions in the README, not possible to run gh attestation unauthenticated #771

Closed

Description

@sollie

What are you trying to do?
Install pie in a Docker using the oneliner from the README.

What platform, and PIE version are you using?
Not relevant?

Steps to reproduce the issue

curl -fL --output /tmp/pie.phar https://github.com/php/pie/releases/latest/download/pie.phar \
  && gh attestation verify --owner php /tmp/pie.phar \
  && sudo mv /tmp/pie.phar /usr/local/bin/pie \
  && sudo chmod +x /usr/local/bin/pie

What do you expect to happen?
Pie being downloaded, attestation to be verified and then have pie moved to my path and made executable.

What is actually happening
The oneliner fails as gh attestation requires either a valid GITHUB_TOKEN to be present or a successful gh auth login to happen before attempting to install.

Complete logs/output

# curl -fL --output /tmp/pie.phar https://github.com/php/pie/releases/latest/download/pie.phar \
>   && gh attestation verify --owner php /tmp/pie.phar \
>   && sudo mv /tmp/pie.phar /usr/local/bin/pie \
>   && sudo chmod +x /usr/local/bin/pie
  % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
                                 Dload  Upload  Total   Spent   Left   Speed
  0      0   0      0   0      0      0      0                              0
  0      0   0      0   0      0      0      0                              0
100  8.52M 100  8.52M   0      0 14.96M      0                              0
To get started with GitHub CLI, please run:  gh auth login
Alternatively, populate the GH_TOKEN environment variable with a GitHub API authentication token.
/ # gh --version
gh version 2.97.0 (2026-09-04)
https://github.com/cli/cli/releases/tag/v2.97.0

Activity

  1. self-assigned this
    on Oct 12, 2026
  2. added
    maintainer investigatingThis ticket is being investigated by maintainers. Please check with us before contributing PRs etc!
    on Oct 12, 2026
  3. added theissue type on Oct 12, 2026
  4. asgrim commented on Oct 12, 2026

    @asgrim
    Contributor

    Agreed it wasn't very clear; this one-liner isn't really usable directly in a Dockerfile. I've made an update to the docs (#772) that clarifies this, and points to the intended example Docker usage :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

documentationImprovements or additions to documentationmaintainer investigatingThis ticket is being investigated by maintainers. Please check with us before contributing PRs etc!

Type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions