Merge pull request 'fix(cd): attestation not-ready regex — cosign 3.x says no matching attestations: (no found)' (#87) from fix/cd-gate-attestation-not-ready-regex into main
CI (SIAX Cloud) / security (push) Successful in 12s
Security Scan (SIAX Cloud) / security (push) Successful in 11s
masterplan-lock / check (push) Successful in 13s
CI (SIAX Cloud) / integration (push) Successful in 25s
CI (SIAX Cloud) / quality (push) Successful in 48s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m10s
Deploy to Coolify / deploy (push) Successful in 1m18s
CI (SIAX Cloud) / security (push) Successful in 12s
Security Scan (SIAX Cloud) / security (push) Successful in 11s
masterplan-lock / check (push) Successful in 13s
CI (SIAX Cloud) / integration (push) Successful in 25s
CI (SIAX Cloud) / quality (push) Successful in 48s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m10s
Deploy to Coolify / deploy (push) Successful in 1m18s
This commit was merged in pull request #87.
This commit is contained in:
@@ -168,7 +168,7 @@ jobs:
|
|||||||
if cosign verify-attestation --key cosign.pub --type "$PREDICATE_TYPE" "${IMAGE_REPO}@${digest}" >/tmp/verify.log 2>&1; then
|
if cosign verify-attestation --key cosign.pub --type "$PREDICATE_TYPE" "${IMAGE_REPO}@${digest}" >/tmp/verify.log 2>&1; then
|
||||||
break
|
break
|
||||||
fi
|
fi
|
||||||
if grep -qE "no matching (attestations|signatures) found" /tmp/verify.log; then
|
if grep -qE "no matching (attestations|signatures)( found)?" /tmp/verify.log; then
|
||||||
echo "image present but attestation not attached yet (attempt $attempt/$max_attempts) — waiting for release.yml's cosign attest..."
|
echo "image present but attestation not attached yet (attempt $attempt/$max_attempts) — waiting for release.yml's cosign attest..."
|
||||||
sleep 15
|
sleep 15
|
||||||
continue
|
continue
|
||||||
|
|||||||
Reference in New Issue
Block a user