Addon build failing on Github actions

Development
1

I built an addon based on this template. It’s been working fine for a couple of weeks, but as of yesterday my Github builds are failing. I even tried an older commit which previously succeeded and it now fails. So it seems like something has changed in the image or with Github. Is anyone else seeing this error?

2024-03-20T21:29:22.5152618Z ghcr.io/home-assistant/amd64-builder:2024.01.0
2024-03-20T21:29:22.5519512Z Error: getting Rekor public keys: unable to initialize client, local cache may be corrupt: invalid key
2024-03-20T21:29:22.5521737Z main.go:74: error during command execution: getting Rekor public keys: unable to initialize client, local cache may be corrupt: invalid key

Here’s the failed build where you can see the full log output.

2

Testing locally, I see the same problem using cosign 2.0.2. But it works fine if I use a newer version 2.2.3. Now to figure out why this GitHub action is using an old version…

3

It looks like it was fixed not long ago you have to update the home-assistant/builder to 2024.03.5

4

Thanks! I just found that too. Builder Failing Due to Key Verification Error · Issue #195 · home-assistant/builder · GitHub