{"id":"cbec1e92604be028","repo":"docker/cli","slug":"image-config-verification-failed-for-digest-s","errorCode":null,"errorMessage":"image config verification failed for digest %s","messagePattern":"image config verification failed for digest (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/registryclient/fetcher.go","lineNumber":127,"sourceCode":"\t\treturn types.ImageManifest{}, err\n\t}\n\n\treturn types.NewOCIImageManifest(ref, manifestDesc, &mfst), nil\n}\n\nfunc pullManifestSchemaV2ImageConfig(ctx context.Context, dgst digest.Digest, repo distribution.Repository) ([]byte, error) {\n\tblobs := repo.Blobs(ctx)\n\tconfigJSON, err := blobs.Get(ctx, dgst)\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\n\tverifier := dgst.Verifier()\n\tif _, err := verifier.Write(configJSON); err != nil {\n\t\treturn nil, err\n\t}\n\tif !verifier.Verified() {\n\t\treturn nil, fmt.Errorf(\"image config verification failed for digest %s\", dgst)\n\t}\n\treturn configJSON, nil\n}\n\n// validateManifestDigest computes the manifest digest, and, if pulling by\n// digest, ensures that it matches the requested digest.\nfunc validateManifestDigest(ref reference.Named, mfst distribution.Manifest) (ocispec.Descriptor, error) {\n\tmediaType, canonical, err := mfst.Payload()\n\tif err != nil {\n\t\treturn ocispec.Descriptor{}, err\n\t}\n\tdesc := ocispec.Descriptor{\n\t\tDigest:    digest.FromBytes(canonical),\n\t\tSize:      int64(len(canonical)),\n\t\tMediaType: mediaType,\n\t}\n\n\t// If pull by digest, then verify the manifest digest.","sourceCodeStart":109,"sourceCodeEnd":145,"githubUrl":"https://github.com/docker/cli/blob/e9452d6e785f6e365712b9d71bd7517591773c86/internal/registryclient/fetcher.go#L109-L145","documentation":"Error \"image config verification failed for digest %s\" thrown in docker/cli.","triggerScenarios":"Thrown at internal/registryclient/fetcher.go:127 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"analyzedSha":"e9452d6e785f6e365712b9d71bd7517591773c86","analyzedAt":"2026-08-01T07:09:22.474Z","schemaVersion":2}