Skip to content

gitsign/0.13.0-r7: cve remediation#75207

Closed
octo-sts[bot] wants to merge 2 commits into
mainfrom
cve-gitsign-0.13.0-r7-2ff7cb511ef4e3f1bcb19e07da229457
Closed

gitsign/0.13.0-r7: cve remediation#75207
octo-sts[bot] wants to merge 2 commits into
mainfrom
cve-gitsign-0.13.0-r7-2ff7cb511ef4e3f1bcb19e07da229457

Attempt to bump protobuf in order to allow to build with latest fulcio

659ac9c
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build (eco-2-28) completed Dec 15, 2025 in 2m 49s

Failed to build APKs

Build ID: add00b40-a7fc-43e9-a260-1182b0ef4235
Error: failed to build gitsign: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

builds

x86_64 Logs

Click to expand 
l3 (3.6.0-r6)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
installing scanelf (1.3.10-r0)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: generating base initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing gnutar-rmt (1.35-r6)
installing gnutar (1.35-r6)
installing libattr1 (2.5.2-r54)
installing attr (2.5.2-r54)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r5)
installing xz (5.8.1-r6)
installing libcrypto3 (3.6.0-r6)
installing kmod (34.2-r42)
installing libmnl (1.0.5-r6)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.194-r0)
installing libbpf (1.6.2-r0)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing krb5-libs (1.22.1-r1)
installing libtirpc (1.3.7-r1)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libnftnl (1.3.1-r0)
installing xtables (1.8.11-r29)
installing libcap (2.77-r0)
installing iproute2 (6.17.0-r2)
installing libstdc++ (15.2.0-r6)
installing inih (62-r1)
installing liburcu (0.15.5-r0)
installing libblkid (2.41.3-r0)
installing libuuid (2.41.3-r0)
installing xfsprogs-core (6.17.0-r2)
installing xfsprogs (6.17.0-r2)
installing libmount (2.41.3-r0)
installing mount (2.41.3-r0)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing linux-pam (1.7.1-r3)
installing openssh-keygen (10.2_p1-r2)
installing openssh-server-config (10.2_p1-r2)
installing openssh-server (10.2_p1-r2)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing setarch (2.41.3-r0)
installing libfdisk (2.41.3-r0)
installing sqlite-libs (3.51.1-r0)
installing util-linux (2.41.3-r0)
installing libsmartcols (2.41.3-r0)
installing util-linux-misc (2.41.3-r0)
installing busybox (1.37.0-r50)
installing microvm-init (0.0.1-r15)
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:56278->127.0.0.1:41823: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
conn read: read tcp 127.0.0.1:56288->127.0.0.1:41823: i/o timeout
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 35328
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 35336 ssh2: ECDSA SHA256:DwUeeTV64OCAQUjr+7Y33xL5f0ehT0J1Ly+Yk6lI4ks
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 35336
qemu: Accepted publickey for root from 10.0.2.2 port 35352 ssh2: ECDSA SHA256:DwUeeTV64OCAQUjr+7Y33xL5f0ehT0J1Ly+Yk6lI4ks
qemu: Accepted publickey for root from 10.0.2.2 port 60470 ssh2: ECDSA SHA256:DwUeeTV64OCAQUjr+7Y33xL5f0ehT0J1Ly+Yk6lI4ks
qemu: Accepted publickey for root from 10.0.2.2 port 35364 ssh2: ECDSA SHA256:DwUeeTV64OCAQUjr+7Y33xL5f0ehT0J1Ly+Yk6lI4ks
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/sigstore/gitsign/' dest='.' depth='unset' branch='' tag='v0.13.0' expcommit='b17948db1402b33caa005637f40e8df9eab56daf' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.K7TIJ6
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v0.13.0 --depth=1 https://github.com/sigstore/gitsign/ /tmp/tmp.K7TIJ6
warning: refs/tags/v0.13.0 ff3e8bac310fea146475ef27b5356ba41e1fed6c is not a commit!
[git checkout] execute: cd /tmp/tmp.K7TIJ6
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.13.0:refs/origin/tags/v0.13.0
[git checkout] execute: git checkout --quiet origin/tags/v0.13.0
[git checkout] tag v0.13.0 is b17948db1402b33caa005637f40e8df9eab56daf
running step "go/bump"
2025/12/15 15:06:49 Local Go version: 1.25.5
2025/12/15 15:06:49 Running go mod tidy with go version '1.25.5' ...
2025/12/15 15:06:56 Update package: golang.org/x/net
2025/12/15 15:06:56 Running go mod edit -droprequire ...
2025/12/15 15:06:56 Running go get ...
2025/12/15 15:06:57 Update package: github.com/cloudflare/circl
2025/12/15 15:06:57 Running go mod edit -droprequire ...
2025/12/15 15:06:57 Running go get ...
2025/12/15 15:06:57 Update package: golang.org/x/crypto
2025/12/15 15:06:57 Running go mod edit -droprequire ...
2025/12/15 15:06:57 Running go get ...
2025/12/15 15:06:57 Update package: github.com/sigstore/protobuf-specs
2025/12/15 15:06:57 Running go mod edit -droprequire ...
2025/12/15 15:06:57 Running go get ...
2025/12/15 15:06:58 Update package: google.golang.org/protobuf
2025/12/15 15:06:58 Running go mod edit -droprequire ...
2025/12/15 15:06:58 Running go get ...
2025/12/15 15:06:58 Update package: github.com/sigstore/fulcio
2025/12/15 15:06:58 Running go mod edit -droprequire ...
2025/12/15 15:06:58 Running go get ...
2025/12/15 15:07:02 Running go mod tidy with go version '1.25.5' ...
running step "go/build"
# github.com/sigstore/sigstore-go/pkg/root
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:33:26: sc.signingConfig.GetCaUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method GetCaUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:37:26: sc.signingConfig.GetOidcUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method GetOidcUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:41:26: sc.signingConfig.GetTlogUrls undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method GetTlogUrls)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:45:9: cannot use sc.signingConfig.GetTsaUrls() (value of type []*"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".Service) as []string value in return statement
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:49:19: sc.signingConfig.CaUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method CaUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:54:19: sc.signingConfig.OidcUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method OidcUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:59:19: sc.signingConfig.TlogUrls undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method TlogUrls)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:64:54: sc.signingConfig.TlogUrls undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method TlogUrls)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:69:29: cannot use tsaURLs (variable of type []string) as []*"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".Service value in assignment
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:74:62: cannot use tsaURLs (variable of type []string) as []*"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".Service value in argument to append
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:74:62: too many errors

aarch64 Logs

Click to expand 
pelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/30b9a3ec01cd36fd44e7ef8cf6f94f14f4976b33 --package-append=ct-manylinux-2.28 --package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/30b9a3ec01cd36fd44e7ef8cf6f94f14f4976b33 --git-repo-url=https://github.com/wolfi-dev/os]
melange version  with runner bubblewrap building [gitsign.yaml] at commit  for arches [arm64]
melange v0.36.0 with runner bubblewrap is building:
populating workspace /tmp/melange-workspace-1014718588 from gitsign
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/30b9a3ec01cd36fd44e7ef8cf6f94f14f4976b33 https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 ca-certificates-bundle=20251003-r0 ct-manylinux-2.28-gcc-14=1.28.0-r87 ct-manylinux-2.28=1.28.0-r87 cyrus-sasl=2.1.28-r45 gcc-14-default=14.3.0-r9 gcc-14=14.3.0-r9 gdbm=1.26-r1 gfortran-14=14.3.0-r9 git=2.52.0-r0 glibc-dev=2.42-r4 glibc-locale-posix=2.42-r4 glibc=2.42-r4 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r4 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r4 libcrypto3=3.6.0-r6 libcurl-openssl4=8.17.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgfortran-14=14.3.0-r9 libgfortran=15.2.0-r6 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r6 libstdc++-14-dev=14.3.0-r9 libstdc++-14=14.3.0-r9 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18.1-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20251025-r1 ncurses=6.5_p20251025-r1 nghttp3=1.13.1-r0 nss-db=2.42-r4 nss-hesiod=2.42-r4 oldlibstdcxx-2.28=8.5.0-r1 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 scanelf=1.3.10-r0 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r24 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0xabd940
installing libgcc (15.2.0-r6)
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libquadmath (15.2.0-r6)
installing libstdc++-14 (14.3.0-r9)
installing libstdc++-14-dev (14.3.0-r9)
installing posix-cc-wrappers (2-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18.1-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing glibc-dev (2.42-r4)
installing openssf-compiler-options (20250904-r2)
installing gcc-14 (14.3.0-r9)
installing libgfortran-14 (14.3.0-r9)
installing gfortran-14 (14.3.0-r9)
installing libgfortran (15.2.0-r6)
installing gcc-14-default (14.3.0-r9)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing ct-manylinux-2.28-gcc-14 (1.28.0-r87)
installing oldlibstdcxx-2.28 (8.5.0-r1)
installing ct-manylinux-2.28 (1.28.0-r87)
installing libcrypto3 (3.6.0-r6)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
installing scanelf (1.3.10-r0)
running step "git-checkout"
[git checkout] repo='https://github.com/sigstore/gitsign/' dest='.' depth='unset' branch='' tag='v0.13.0' expcommit='b17948db1402b33caa005637f40e8df9eab56daf' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.twNcw6
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v0.13.0 --depth=1 https://github.com/sigstore/gitsign/ /tmp/tmp.twNcw6
warning: refs/tags/v0.13.0 ff3e8bac310fea146475ef27b5356ba41e1fed6c is not a commit!
[git checkout] execute: cd /tmp/tmp.twNcw6
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.13.0:refs/origin/tags/v0.13.0
[git checkout] execute: git checkout --quiet origin/tags/v0.13.0
[git checkout] tag v0.13.0 is b17948db1402b33caa005637f40e8df9eab56daf
running step "go/bump"
2025/12/15 15:06:40 Local Go version: 1.25.5
2025/12/15 15:06:40 Running go mod tidy with go version '1.25.5' ...
2025/12/15 15:06:47 Update package: golang.org/x/net
2025/12/15 15:06:47 Running go mod edit -droprequire ...
2025/12/15 15:06:47 Running go get ...
2025/12/15 15:06:47 Update package: github.com/cloudflare/circl
2025/12/15 15:06:47 Running go mod edit -droprequire ...
2025/12/15 15:06:47 Running go get ...
2025/12/15 15:06:47 Update package: golang.org/x/crypto
2025/12/15 15:06:47 Running go mod edit -droprequire ...
2025/12/15 15:06:47 Running go get ...
2025/12/15 15:06:48 Update package: github.com/sigstore/protobuf-specs
2025/12/15 15:06:48 Running go mod edit -droprequire ...
2025/12/15 15:06:48 Running go get ...
2025/12/15 15:06:48 Update package: google.golang.org/protobuf
2025/12/15 15:06:48 Running go mod edit -droprequire ...
2025/12/15 15:06:48 Running go get ...
2025/12/15 15:06:48 Update package: github.com/sigstore/fulcio
2025/12/15 15:06:48 Running go mod edit -droprequire ...
2025/12/15 15:06:48 Running go get ...
2025/12/15 15:06:52 Running go mod tidy with go version '1.25.5' ...
running step "go/build"
# github.com/sigstore/sigstore-go/pkg/root
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:33:26: sc.signingConfig.GetCaUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method GetCaUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:37:26: sc.signingConfig.GetOidcUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method GetOidcUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:41:26: sc.signingConfig.GetTlogUrls undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method GetTlogUrls)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:45:9: cannot use sc.signingConfig.GetTsaUrls() (value of type []*"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".Service) as []string value in return statement
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:49:19: sc.signingConfig.CaUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method CaUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:54:19: sc.signingConfig.OidcUrl undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method OidcUrl)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:59:19: sc.signingConfig.TlogUrls undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method TlogUrls)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:64:54: sc.signingConfig.TlogUrls undefined (type *"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".SigningConfig has no field or method TlogUrls)
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:69:29: cannot use tsaURLs (variable of type []string) as []*"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".Service value in assignment
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:74:62: cannot use tsaURLs (variable of type []string) as []*"github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1".Service value in argument to append
/var/cache/melange/gomodcache/github.com/sigstore/sigstore-go@v0.7.0/pkg/root/signing_config.go:74:62: too many errors
failed to build package: unable to run package gitsign pipeline: unable to run pipeline: unable to run pipeline: exit status 1
failed to build: command melange failed: exit status 1
build failed: command melange failed: exit status 1

Indexes

https://apk.cgr.dev/chainguard-2.28-presubmit/30b9a3ec01cd36fd44e7ef8cf6f94f14f4976b33

❌ Failed Packages

  • ❌ gitsign (error | 47s)

Packages

More Observability

Command

cg build log \
  --build-id add00b40-a7fc-43e9-a260-1182b0ef4235 \
  --project prod-eco-8de7 \
  --cluster elastic-pre \
  --namespace pre-eco-2-28 \
  --start 2025-12-15T15:04:28Z \
  --end 2025-12-15T15:17:18Z
View more details on Chainguard Internal