You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Build provenances are not properly included with releases since v0.19.2
No certificate provided, trying Redis search index to find entries by subject digest
Verifying artifact go-containerregistry.tar.gz: FAILED: error searching rekor entries: no matching entries found
FAILED: SLSA verification failed: error searching rekor entries: no matching entries found
This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Keep fresh with the 'lifecycle/frozen' label.
This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Keep fresh with the 'lifecycle/frozen' label.
Describe the bug
Build provenances are not properly included with releases since v0.19.2
To Reproduce
https://github.com/google/go-containerregistry/actions/runs/9966916706/job/27539952152
https://github.com/google/go-containerregistry/actions/runs/9845572711/job/27181699181
https://github.com/google/go-containerregistry/actions/runs/9527779284/job/26264811699
Expected behavior
Proper build provenances to be included in the release to they can be used for validation.
Additional context
N/A
The text was updated successfully, but these errors were encountered: