scorecard pipeline is failing in `master` branch
ytsarev opened this issue · comments
It's happening for a while, example https://github.com/k8gb-io/k8gb/actions/runs/9150847377
@jkremser as a supply chain master, do you see there some obvious fix? :)
🤞 #1567
@jkremser, thanks a ton for the quick attempt! https://github.com/k8gb-io/k8gb/actions/runs/9157536246/job/25174078930 unfortunately, it still fails
breadcrumb ossf/scorecard-action#997
2024/06/30 12:56:35 error signing scorecard json results: error signing payload: getting key from Fulcio: verifying SCT: updating local metadata and targets: error updating to TUF remote mirror: invalid key
which is matching the issue above