Merge pull request 'fix(cd): attestation not-ready regex — cosign 3.x says no matching attestations: (no found)' (#87) from fix/cd-gate-attestation-not-ready-regex into main
CI (SIAX Cloud) / security (push) Successful in 12s
Security Scan (SIAX Cloud) / security (push) Successful in 11s
masterplan-lock / check (push) Successful in 13s
CI (SIAX Cloud) / integration (push) Successful in 25s
CI (SIAX Cloud) / quality (push) Successful in 48s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m10s
Deploy to Coolify / deploy (push) Successful in 1m18s

This commit was merged in pull request #87.
This commit is contained in:
2026-09-22 04:02:12 +00:00
+1 -1
View File
@@ -168,7 +168,7 @@ jobs:
if cosign verify-attestation --key cosign.pub --type "$PREDICATE_TYPE" "${IMAGE_REPO}@${digest}" >/tmp/verify.log 2>&1; then
break
fi
if grep -qE "no matching (attestations|signatures) found" /tmp/verify.log; then
if grep -qE "no matching (attestations|signatures)( found)?" /tmp/verify.log; then
echo "image present but attestation not attached yet (attempt $attempt/$max_attempts) — waiting for release.yml's cosign attest..."
sleep 15
continue