Skip to content

Comments

fix: Detect if custom CLI_VERSION is a tag or branch#135

Open
gmpinder wants to merge 1 commit intomainfrom
fix-slsa-verify
Open

fix: Detect if custom CLI_VERSION is a tag or branch#135
gmpinder wants to merge 1 commit intomainfrom
fix-slsa-verify

Conversation

@gmpinder
Copy link
Member

Recently saw a secureblue build that was testing a branch build fail to verify the attestation of the image. The problem I believe stemmed from the use of the --source-tag arg. This PR adds a regex check to see if the user is requesting a tag image instead of a branch image.

@gmpinder gmpinder self-assigned this Feb 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant