Is it possible to trust a specific tap revision/commit?

[herrernst]

When thinking about the new (tap) trust feature of 6.0, I'd rather like to trust a tap/formula only in a specific revision/git commit to reduce supply-chain attacks. Like when I want to install a rarely used tool from some lone OSS programmer that hasn't changed in a while and probably never will, I'd like to trust the tap/formula exactly as it is now, but not eventual future changes (maybe at least require confirmation for updates). Is this possible somehow?

[SMillerDev]

You could do the following, which would have the same effect:

brew tap some/tap
brew trust some/tap
brew install some/tap/software
brew untrust some/tap

[herrernst]

Thanks, but that doesn't help when I'm using a Brewfile to set up a new machine or use it in CI/CD