sigstore / rekor

Software Supply Chain Transparency Log
https://sigstore.dev
Apache License 2.0
903 stars 164 forks source link

improve error message from API layer #2209

Closed bobcallaway closed 3 months ago

bobcallaway commented 3 months ago

Description

https://github.com/sigstore/rekor/blob/542fd11063d1e2364d3b91e478ae1f931e418f5d/pkg/api/entries.go#L419 assumes all validation errors are malformed UUIDs. This could be improved, and we should also double check the response codes are correct if we hit a transient error communicating with trillian.