Run sigstore/cosign-installer@main
Run #!/bin/bash
INFO: Downloading bootstrap version 'v1.8.0' of cosign to verify version to be installed...
https://storage.googleapis.com/cosign-releases/v1.8.0/cosign-linux-amd64
INFO: Custom cosign version 'v2.3.0' requested
INFO: Downloading platform-specific version 'v2.3.0' of cosign...
https://storage.googleapis.com/cosign-releases/v2.3.0/cosign-linux-amd64
INFO: Downloading detached signature for platform-specific 'v2.3.0' of cosign...
https://github.com/sigstore/cosign/releases/download/v2.3.0/cosign-linux-amd64.sig
INFO: Using bootstrap cosign to verify signature of desired cosign version
Error: verifying blob [cosign_v2.3.0]: loading public key: pem to public key: PEM decoding failed
main.go:52: error during command execution: verifying blob [cosign_v2.3.0]: loading public key: pem to public key: PEM decoding failed
Error: Process completed with exit code 1.
Checklist
[x] Commits are signed with Developer Certificate of Origin (DCO)
Signed-off-by: Zbynek Roubalik zroubalik@gmail.com
Checklist