{"id":"e1431f4af9193fd3","repo":"docker/cli","slug":"all-signed-tags-are-currently-revoked-use-docker","errorCode":null,"errorMessage":"all signed tags are currently revoked, use docker trust sign to fix","messagePattern":"all signed tags are currently revoked, use docker trust sign to fix","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"cmd/docker-trust/trust/signer_remove.go","lineNumber":67,"sourceCode":"\t\t}\n\t}\n\tif len(errRepos) > 0 {\n\t\treturn fmt.Errorf(\"error removing signer from: %s\", strings.Join(errRepos, \", \"))\n\t}\n\treturn nil\n}\n\nfunc isLastSignerForReleases(roleWithSig data.Role, allRoles []client.RoleWithSignatures) (bool, error) {\n\tvar releasesRoleWithSigs client.RoleWithSignatures\n\tfor _, role := range allRoles {\n\t\tif role.Name == releasesRoleTUFName {\n\t\t\treleasesRoleWithSigs = role\n\t\t\tbreak\n\t\t}\n\t}\n\tcounter := len(releasesRoleWithSigs.Signatures)\n\tif counter == 0 {\n\t\treturn false, errors.New(\"all signed tags are currently revoked, use docker trust sign to fix\")\n\t}\n\tfor _, signature := range releasesRoleWithSigs.Signatures {\n\t\tfor _, key := range roleWithSig.KeyIDs {\n\t\t\tif signature.KeyID == key {\n\t\t\t\tcounter--\n\t\t\t}\n\t\t}\n\t}\n\treturn counter < releasesRoleWithSigs.Threshold, nil\n}\n\nfunc maybePromptForSignerRemoval(ctx context.Context, dockerCLI command.Cli, repoName, signerName string, isLastSigner, forceYes bool) (bool, error) {\n\tif isLastSigner && !forceYes {\n\t\tmessage := fmt.Sprintf(\"The signer \\\"%s\\\" signed the last released version of %s. \"+\n\t\t\t\"Removing this signer will make %s unpullable. \"+\n\t\t\t\"Are you sure you want to continue?\",\n\t\t\tsignerName, repoName, repoName,\n\t\t)","sourceCodeStart":49,"sourceCodeEnd":85,"githubUrl":"https://github.com/docker/cli/blob/e9452d6e785f6e365712b9d71bd7517591773c86/cmd/docker-trust/trust/signer_remove.go#L49-L85","documentation":"Error \"all signed tags are currently revoked, use docker trust sign to fix\" thrown in docker/cli.","triggerScenarios":"Thrown at cmd/docker-trust/trust/signer_remove.go:67 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"analyzedSha":"e9452d6e785f6e365712b9d71bd7517591773c86","analyzedAt":"2026-08-01T07:09:22.474Z","schemaVersion":2}