{"record":{"id":"99b9f383267d72ab","repo":"cli/cli","slug":"failed-to-choose-verifier-based-on-provided-bundle","errorCode":null,"errorMessage":"failed to choose verifier based on provided bundle issuer: %v","messagePattern":"failed to choose verifier based on provided bundle issuer: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/cmd/attestation/verification/sigstore.go","lineNumber":254,"sourceCode":"\tif len(ca.Intermediates) > 0 {\n\t\treturn ca.Intermediates[0], nil\n\t} else if ca.Root != nil {\n\t\treturn ca.Root, nil\n\t}\n\n\treturn nil, fmt.Errorf(\"certificate authority had no certificates\")\n}\n\nfunc (v *LiveSigstoreVerifier) verify(attestation *api.Attestation, policy verify.PolicyBuilder) (*AttestationProcessingResult, error) {\n\tissuer, err := getBundleIssuer(attestation.Bundle)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to get bundle issuer: %v\", err)\n\t}\n\n\t// determine which verifier should attempt verification against the bundle\n\tverifier, err := v.chooseVerifier(issuer)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to choose verifier based on provided bundle issuer: %v\", err)\n\t}\n\n\tv.Logger.VerbosePrintf(\"Attempting verification against issuer \\\"%s\\\"\\n\", issuer)\n\t// attempt to verify the attestation\n\tresult, err := verifier.Verify(attestation.Bundle, policy)\n\t// if verification fails, create the error and exit verification early\n\tif err != nil {\n\t\tv.Logger.VerbosePrint(v.Logger.ColorScheme.Redf(\n\t\t\t\"Failed to verify against issuer \\\"%s\\\" \\n\\n\", issuer,\n\t\t))\n\n\t\treturn nil, fmt.Errorf(\"verifying with issuer \\\"%s\\\"\", issuer)\n\t}\n\n\t// if verification is successful, add the result\n\t// to the AttestationProcessingResult entry\n\tv.Logger.VerbosePrint(v.Logger.ColorScheme.Greenf(\n\t\t\"SUCCESS - attestation signature verified with \\\"%s\\\"\\n\", issuer,","sourceCodeStart":236,"sourceCodeEnd":272,"githubUrl":"https://github.com/cli/cli/blob/0eeec0b92edbe70199f9768522f831d3534f41ad/pkg/cmd/attestation/verification/sigstore.go#L236-L272","documentation":"Error \"failed to choose verifier based on provided bundle issuer: %v\" thrown in cli/cli.","triggerScenarios":"Thrown at pkg/cmd/attestation/verification/sigstore.go:254 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check the bundle issuer against available verifiers; supply a custom verifier for the issuer or re-verify with default verifiers."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"0eeec0b92edbe70199f9768522f831d3534f41ad","analyzedAt":"2026-08-15T12:31:05.478Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}