scorecard pipeline is failing in `master` branch
ytsarev opened this issue · 5 comments
ytsarev commented
It's happening for a while, example https://github.com/k8gb-io/k8gb/actions/runs/9150847377
ytsarev commented
@jkremser, thanks a ton for the quick attempt! https://github.com/k8gb-io/k8gb/actions/runs/9157536246/job/25174078930 unfortunately, it still fails
ytsarev commented
breadcrumb ossf/scorecard-action#997
ytsarev commented
2024/06/30 12:56:35 error signing scorecard json results: error signing payload: getting key from Fulcio: verifying SCT: updating local metadata and targets: error updating to TUF remote mirror: invalid key
which is matching the issue above