slsa-verifier
slsa-verifier copied to clipboard
e2e-cli.sh pre-submit script fails
workflow_id:30330619
run_id:540[8](https://github.com/slsa-framework/slsa-verifier/actions/runs/5408519694/jobs/9827769041?pr=645#step:6:9)45[9](https://github.com/slsa-framework/slsa-verifier/actions/runs/5408519694/jobs/9827769041?pr=645#step:6:10)460
artifact_id:
gh: Not Found (HTTP 404)
End-of-central-directory signature not found. Either this file is not
Archive: artifacts1.zip
a zipfile, or it constitutes one disk of a multi-part archive. In the
latter case the central directory and zipfile comment will be found on
the last disk(s) of this archive.
unzip: cannot find zipfile directory in one of artifacts1.zip or
artifacts1.zip.zip, and cannot find artifacts1.zip.ZIP, period.
artifact_id:
gh: Not Found (HTTP 404)
End-of-central-directory signature not found. Either this file is not
Archive: attestation1.intoto.jsonl.zip
a zipfile, or it constitutes one disk of a multi-part archive. In the
latter case the central directory and zipfile comment will be found on
the last disk(s) of this archive.
unzip: cannot find zipfile directory in one of attestation1.intoto.jsonl.zip or
attestation1.intoto.jsonl.zip.zip, and cannot find attestation1.intoto.jsonl.zip.ZIP, period.
/home/runner/work/slsa-verifier/slsa-verifier
Testing against builder args
**** Default parameters (annotated tags) *****
./__THIS_REPO__/slsa-verifier verify-artifact artifact1 --provenance-path attestation1.intoto.jsonl --source-uri github.com/slsa-framework/example-package
WARNING: Insecure SLSA_VERIFIER_TESTING is enabled.
Verifying artifact artifact1: FAILED: open artifact1: no such file or directory
FAILED: SLSA verification failed: open artifact1: no such file or directory
✖ 1 == 0 :: not main default parameters (annotated_tags)
Error: Process completed with exit code 1.