sigstore / sigstore-js

Code-signing for npm packages

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Improving Error Messages, specifically for signing certificate and tlog entry

enteraga6 opened this issue · comments

Describe the issue
When running a workflow that utilizes sigstore-js to generate a token I received the error messages: "error creating signing certificate" and "error creating tlog entry". Running the workflow again after the first two failures resulted in it generating the token successfully, but I am still confused as to the exact reason why it failed the first two times. To help users identify the source of their problem, I propose improving error messages to provide more detail about the specific issue or failure that occurred. This will give users a better understanding of what went wrong and why, which will make it easier for them to troubleshoot the problem and understand why it occurred.

Relevant Links
Code for "error creating signing certificate"
Code for "error creating tlog entry"

Context if Needed
These were my workflow runs:
Run 1: "error creating tlog entry"
Run 2: "error creating signing certificate"

With the 2.1 release, the specific error text returned by Fulcio/Rekor will now be included in the message of the thrown error.