diff --git a/Library/Homebrew/cask/download.rb b/Library/Homebrew/cask/download.rb
index eb1d9a70871398..c73b12b7ea8d93 100644
--- a/Library/Homebrew/cask/download.rb
+++ b/Library/Homebrew/cask/download.rb
@@ -82,7 +82,8 @@ def basename
 
     sig { override.params(filename: Pathname).void }
     def verify_download_integrity(filename)
-      if @cask.sha256 == :no_check
+      official_cask_tap = cask.tap&.official?
+      if @cask.sha256 == :no_check && !official_cask_tap
         opoo "No checksum defined for cask '#{@cask}', skipping verification."
         return
       end
diff --git a/Library/Homebrew/cask/installer.rb b/Library/Homebrew/cask/installer.rb
index 2c691fad81b3f4..f826211a8e07bc 100644
--- a/Library/Homebrew/cask/installer.rb
+++ b/Library/Homebrew/cask/installer.rb
@@ -107,7 +107,8 @@ def install
       backup if force? && @cask.staged_path.exist? && @cask.metadata_versioned_path.exist?
 
       oh1 "Installing Cask #{Formatter.identifier(@cask)}"
-      opoo "macOS's Gatekeeper has been disabled for this Cask" unless quarantine?
+      # GitHub Actions globally disables Gatekeeper.
+      opoo "macOS's Gatekeeper has been disabled for this Cask" if !quarantine? && !GitHub::Actions.env_set?
       stage
 
       @cask.config = @cask.default_config.merge(old_config)