Skip to content

[StepSecurity] ci: Harden GitHub Actions #1576

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
step-security-bot wants to merge 1 commit into from

[StepSecurity] ci: Harden GitHub Actions

2d68af1
Select commit
Loading
Failed to load commit list.
Closed

[StepSecurity] ci: Harden GitHub Actions #1576

[StepSecurity] ci: Harden GitHub Actions
2d68af1
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing required action Mar 20, 2025 in 0s

Failed to verify commit signature.

CLAIM DESCRIPTION
✅ Found Git signature
⚠️ Validated Git signature Good GPG signature detected by GitHub, but want keyless signature - See https://docs.sigstore.dev/cosign/signing/gitsign/ for how to get started.

Details

Error Details

2 errors occurred:
	* failed to parse signature: asn1: structure error: tags don't match (16 vs {class:0 tag:13 length:77 isCompound:true}) {optional:false explicit:false application:false private:false defaultValue:<nil> tag:<nil> stringType:0 timeType:0 set:false omitEmpty:false} ContentInfo @2
	* Signature Verification Error: Invalid signature caused by openpgp: signature made by unknown entity
View more details on Chainguard Enforce