Skip to content

fix: add --yes flag to cosign sign to fix Rekor upload failures - #4271

Closed
dx4homelab wants to merge 1 commit into
ublue-os:mainfrom
dx4homelab:fix/cosign-sign-yes-flag
Closed

fix: add --yes flag to cosign sign to fix Rekor upload failures#4271
dx4homelab wants to merge 1 commit into
ublue-os:mainfrom
dx4homelab:fix/cosign-sign-yes-flag

Conversation

@dx4homelab

Copy link
Copy Markdown

Summary

  • Adds --yes flag to the cosign sign command in the reusable build workflow
  • Fixes the SBOM attestation/Rekor upload failures that have been breaking stable builds

Resolves #4254

Test plan

  • Verify stable builds complete successfully with the updated cosign sign command
  • Confirm SBOMs are properly pushed to Rekor transparency log

🤖 Generated with Claude Code

Resolves ublue-os#4254

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@dosubot dosubot Bot added size:XS This PR changes 0-9 lines, ignoring generated files. kind/bug Something isn't working labels Mar 10, 2026
@renner0e

Copy link
Copy Markdown
Member

Thanks for the PR. How have you tested this?

@dx4homelab

Copy link
Copy Markdown
Author

It seems by fix does not working yet.

@dx4homelab dx4homelab closed this Mar 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bug Something isn't working size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Stable builds have been failing on 'cosign attest'

2 participants