failed to choose verifier based on provided bundle issuer: %

Error message

failed to choose verifier based on provided bundle issuer: %v

What it means

Error "failed to choose verifier based on provided bundle issuer: %v" thrown in cli/cli.

Source

Thrown at pkg/cmd/attestation/verification/sigstore.go:254

	if len(ca.Intermediates) > 0 {
		return ca.Intermediates[0], nil
	} else if ca.Root != nil {
		return ca.Root, nil
	}

	return nil, fmt.Errorf("certificate authority had no certificates")
}

func (v *LiveSigstoreVerifier) verify(attestation *api.Attestation, policy verify.PolicyBuilder) (*AttestationProcessingResult, error) {
	issuer, err := getBundleIssuer(attestation.Bundle)
	if err != nil {
		return nil, fmt.Errorf("failed to get bundle issuer: %v", err)
	}

	// determine which verifier should attempt verification against the bundle
	verifier, err := v.chooseVerifier(issuer)
	if err != nil {
		return nil, fmt.Errorf("failed to choose verifier based on provided bundle issuer: %v", err)
	}

	v.Logger.VerbosePrintf("Attempting verification against issuer \"%s\"\n", issuer)
	// attempt to verify the attestation
	result, err := verifier.Verify(attestation.Bundle, policy)
	// if verification fails, create the error and exit verification early
	if err != nil {
		v.Logger.VerbosePrint(v.Logger.ColorScheme.Redf(
			"Failed to verify against issuer \"%s\" \n\n", issuer,
		))

		return nil, fmt.Errorf("verifying with issuer \"%s\"", issuer)
	}

	// if verification is successful, add the result
	// to the AttestationProcessingResult entry
	v.Logger.VerbosePrint(v.Logger.ColorScheme.Greenf(
		"SUCCESS - attestation signature verified with \"%s\"\n", issuer,

View on GitHub (pinned to 0eeec0b92e)

Solutions

Check the bundle issuer against available verifiers; supply a custom verifier for the issuer or re-verify with default verifiers.

When it happens

Trigger: Thrown at pkg/cmd/attestation/verification/sigstore.go:254 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of cli/cli@0eeec0b92e (2026-08-15). Data as JSON: /api/errors/99b9f383267d72ab. Report an issue: GitHub.