{"record":{"id":"5d6fa05baad5421e","repo":"cli/cli","slug":"verifying-with-issuer-s","errorCode":null,"errorMessage":"verifying with issuer \"%s\"","messagePattern":"verifying with issuer \"(.+?)\"","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/cmd/attestation/verification/sigstore.go","lineNumber":266,"sourceCode":"\t\treturn nil, fmt.Errorf(\"failed to get bundle issuer: %v\", err)\n\t}\n\n\t// determine which verifier should attempt verification against the bundle\n\tverifier, err := v.chooseVerifier(issuer)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to choose verifier based on provided bundle issuer: %v\", err)\n\t}\n\n\tv.Logger.VerbosePrintf(\"Attempting verification against issuer \\\"%s\\\"\\n\", issuer)\n\t// attempt to verify the attestation\n\tresult, err := verifier.Verify(attestation.Bundle, policy)\n\t// if verification fails, create the error and exit verification early\n\tif err != nil {\n\t\tv.Logger.VerbosePrint(v.Logger.ColorScheme.Redf(\n\t\t\t\"Failed to verify against issuer \\\"%s\\\" \\n\\n\", issuer,\n\t\t))\n\n\t\treturn nil, fmt.Errorf(\"verifying with issuer \\\"%s\\\"\", issuer)\n\t}\n\n\t// if verification is successful, add the result\n\t// to the AttestationProcessingResult entry\n\tv.Logger.VerbosePrint(v.Logger.ColorScheme.Greenf(\n\t\t\"SUCCESS - attestation signature verified with \\\"%s\\\"\\n\", issuer,\n\t))\n\n\treturn &AttestationProcessingResult{\n\t\tAttestation:        attestation,\n\t\tVerificationResult: result,\n\t}, nil\n}\n\nfunc (v *LiveSigstoreVerifier) Verify(attestations []*api.Attestation, policy verify.PolicyBuilder) ([]*AttestationProcessingResult, error) {\n\tif len(attestations) == 0 {\n\t\treturn nil, ErrNoAttestationsVerified\n\t}","sourceCodeStart":248,"sourceCodeEnd":284,"githubUrl":"https://github.com/cli/cli/blob/0eeec0b92edbe70199f9768522f831d3534f41ad/pkg/cmd/attestation/verification/sigstore.go#L248-L284","documentation":"Error \"verifying with issuer \"%s\"\" thrown in cli/cli.","triggerScenarios":"Thrown at pkg/cmd/attestation/verification/sigstore.go:266 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["No action needed; this is an informational message about which issuer is used for verification."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"0eeec0b92edbe70199f9768522f831d3534f41ad","analyzedAt":"2026-08-15T12:31:05.478Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}