admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(cd): attestation not-ready regex — cosign 3.x says no matching attestations: (no found) #87

Merged
admin merged 1 commits from fix/cd-gate-attestation-not-ready-regex into main 2026-09-22 04:02:13 +00:00
Conversation 1 Commits 1 Files Changed 1
+1 -1
admin commented 2026-09-22 03:42:28 +00:00
Owner
Copy Link
Copy Source

Mätt live 2026-09-22

release.yml G17-attest slutade 03:37:18, men cd.yml poll-nedan träffade digesten 03:37:02 (image pushas före attest-upload slutförs). cosign 3.1.3 svarade Error: no matching attestations: — utan avslutande found — så gatens retry-regex no matching (attestations|signatures) found missade det och tolkade en TRANSIENT not-ready som hårt verify-fel (motiverar PR#60:s 8s-race-fix med ny meddelandeform).

Fix

Regex breddad till no matching (attestations|signatures)( found)? — fail-closed för RIKTIGA attest-fel oförändrad.

## Mätt live 2026-09-22 release.yml G17-attest slutade 03:37:18, men cd.yml poll-nedan träffade digesten 03:37:02 (image pushas före attest-upload slutförs). cosign 3.1.3 svarade `Error: no matching attestations: ` — utan avslutande `found` — så gatens retry-regex `no matching (attestations|signatures) found` missade det och tolkade en TRANSIENT not-ready som hårt verify-fel (motiverar PR#60:s 8s-race-fix med ny meddelandeform). ## Fix Regex breddad till `no matching (attestations|signatures)( found)?` — fail-closed för RIKTIGA attest-fel oförändrad.
admin added 1 commit 2026-09-22 03:42:29 +00:00
fix(cd): attestation not-ready regex — cosign 3.x says 'no matching attestations:' (no 'found')
CI (SIAX Cloud) / integration (push) Has been skipped
Details
masterplan-lock / check (pull_request) Successful in 5s
Details
masterplan-lock / check (push) Successful in 9s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 15s
Details
CI (SIAX Cloud) / security (push) Successful in 20s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 23s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 27s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 33s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 40s
Details
CI (SIAX Cloud) / quality (push) Successful in 51s
Details
1d5233cee0 
Measured live 2026-09-22: release.yml's G17 attest finished 03:37:18, but
cd.yml's poll loop hit the digest at 03:37:02 (image pushed before the
attestation upload completed) and cosign 3.1.3 failed with 'Error: no
matching attestations: ' — the gate's retry regex required the trailing
'found', so a transient not-ready state was misread as a hard verify
failure. Broaden the regex to accept both message forms; the fail-closed
behaviour for REAL attest failures is unchanged.
CODEOWNERS rules requested review from sax3l 2026-09-22 03:42:29 +00:00
siax-bot approved these changes 2026-09-22 03:53:09 +00:00
siax-bot left a comment
Collaborator
Copy Link
Copy Source

Regex-bredning verifierad mot mätt live-feltext; fail-closed bibehållen. Godkänd.

Regex-bredning verifierad mot mätt live-feltext; fail-closed bibehållen. Godkänd.
admin closed this pull request 2026-09-22 03:53:15 +00:00
admin deleted branch fix/cd-gate-attestation-not-ready-regex 2026-09-22 03:53:15 +00:00
admin reopened this pull request 2026-09-22 03:53:19 +00:00
admin closed this pull request 2026-09-22 03:57:39 +00:00
admin deleted branch fix/cd-gate-attestation-not-ready-regex 2026-09-22 03:57:39 +00:00
admin reopened this pull request 2026-09-22 03:57:41 +00:00
admin merged commit df6ab700b1 into main 2026-09-22 04:02:13 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
sax3l
siax-bot
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#87