Skip to content
bluebuild

Use Rekor v2 for image attestations #487

Sign in to view logs

Use Rekor v2 for image attestations

Use Rekor v2 for image attestations #487

Triggered via push August 3, 2026 23:46
@SecAI-HubSecAI-Hub
pushed 37e8470
main
Status Failure
Total duration 18m 5s
Artifacts 1

build.yml

on: push
Stage 1: Source Prep
1m 6s
Stage 1: Source Prep
Matrix: Stage 2: Build, Sign, and Publish Custom Image
Matrix: Stage 2: Build Custom Image (Unprivileged PR)
Stage 3: Release Evidence and Attestations
7m 15s
Stage 3: Release Evidence and Attestations
Stage 4: BlueBuild Gate
0s
Stage 4: BlueBuild Gate
Tier 1 Smoke Test (Artifact Verification)
0s
Tier 1 Smoke Test (Artifact Verification)
Fit to window
Zoom out
Zoom in

Annotations

1 error and 1 warning
Stage 3: Release Evidence and Attestations
Error: No credentials found for registry ghcr.io
Stage 2: Build, Sign, and Publish Custom Image (recipe.yml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f, docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130, slsa-framework/slsa-verifier/actions/installer@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
source-prep Expired
142 MB
sha256:2e0ee9912e398fc162f991e5c215372cd77e0403d309352ce068514248f99511