diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index a7b18b0..0ad7b33 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -69,12 +69,12 @@ homebrew_casks:
     description: Linter that enforces one way to write Go
     binaries:
       - ago
-    hooks:
-      post:
-        install: |
-          if OS.mac? && system_command("/usr/bin/xattr", args: ["-h"]).exit_status == 0
-            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/ago"], sudo: false
-          end
+    custom_block: |
+      postflight_steps do
+        on_macos do
+          run "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "{{ "{{staged_path}}" }}/ago"], sudo: false
+        end
+      end
 
 checksum:
   name_template: checksums.txt
diff --git a/README.md b/README.md
index 93effd4..6a1b8db 100644
--- a/README.md
+++ b/README.md
@@ -79,7 +79,8 @@ go install github.com/agentstation/ago/cmd/ago@latest
 On macOS or Linux with Homebrew:
 
 ```sh
-brew install agentstation/tap/ago
+brew trust --cask agentstation/tap/ago
+brew install --cask agentstation/tap/ago
 ```
 
 Release archives, checksums, and software bills of materials are available on