Error verifying signature for `container:latest`

[gustav-b]

Describe the bug

I'm having trouble installing the :latest tag of the container plugin. It seems that the signature verification fails:

{"level":"INFO","msg":"Resolving dependencies ...","timestamp":"2025-11-13 06:45:20"}
{"level":"INFO","msg":"Installing artifacts","refs":["ghcr.io/falcosecurity/rules/falco-rules:4","ghcr.io/falcosecurity/plugins/plugin/k8saudit:latest","ghcr.io/falcosecurity/plugins/plugin/container:latest","ghcr.io/falcosecurity/plugins/ruleset/k8saudit:latest","json:0.7.0"],"timestamp":"2025-11-13 06:45:23"}

[…]

{"level":"INFO","msg":"Preparing to pull artifact","ref":"ghcr.io/falcosecurity/plugins/plugin/container:latest","timestamp":"2025-11-13 06:45:26"}
{"level":"INFO","msg":"Pulling layer 04ce78822515","timestamp":"2025-11-13 06:45:26"}
{"level":"INFO","msg":"Pulling layer aa69ae222fb3","timestamp":"2025-11-13 06:45:27"}
{"level":"INFO","msg":"Pulling layer 771964656cca","timestamp":"2025-11-13 06:45:27"}
{"digest":"ghcr.io/falcosecurity/plugins/plugin/container@sha256:8ed90cfa83d5821a2e75395ef6c256f7cdbb9351fe3e6eae9271330631c1d6c0","level":"INFO","msg":"Verifying signature for artifact","timestamp":"2025-11-13 06:45:27"}
{"level":"ERROR","msg":"error while verifying signature for ghcr.io/falcosecurity/plugins/plugin/container@sha256:8ed90cfa83d5821a2e75395ef6c256f7cdbb9351fe3e6eae9271330631c1d6c0: no signatures found","timestamp":"2025-11-13 06:45:27"}

Could there be an issue with the latest published image? Other plugin pulls for latest tags (like k8saudit) work fine.

[sethstuart]

I am having the same issue. Adding --no-verify to the artifact installer args is a functional workaround, but it seems unwise to not verify the images of security software.