chainguard-dev / gobump

Go tool to declaratively bump dependencies.
Apache License 2.0
7 stars 11 forks source link

Improve Errors and Update Readme #16

Closed debasishbsws closed 9 months ago

debasishbsws commented 9 months ago
debasishbsws commented 9 months ago

I am signing the commits using gitsign following https://docs.sigstore.dev/signing/gitsign/ Why the cert are not getting verified? Is there anything I should look on?

debasishbsws commented 9 months ago

Is it because of https://github.com/chainguard-dev/gobump/blob/b10c54a40ba783d7dd7aec4127dc809b22d7f3d3/.chainguard/source.yaml#L9 And I need to have chainguard.dev email account that matches with the regex? chainguard-enforce docs is not clear. /cc @hectorj2f

hectorj2f commented 9 months ago

thanks @debasishbsws! I merged your PR.