The certificate pin watchdog found a live Sigstore leaf SPKI that is
not in the pinned set, or could not verify one.
- fulcio.sigstore.dev: live leaf SPKI c1263116d71461a69097456e0b14a932e8579198242147168b1471a5076c890c is NOT in the pinned set
If this is a genuine Sigstore rotation, update FULCIO_PRODUCTION_PINS
/ REKOR_PRODUCTION_PINS in
src/lib/src/signature/keyless/cert_pinning.rs and cut a patch release
before the stale pin blocks the next release build.
Watchdog run: https://github.com/pulseengine/sigil/actions/runs/28929173652
The certificate pin watchdog found a live Sigstore leaf SPKI that is
not in the pinned set, or could not verify one.
If this is a genuine Sigstore rotation, update
FULCIO_PRODUCTION_PINS/
REKOR_PRODUCTION_PINSinsrc/lib/src/signature/keyless/cert_pinning.rsand cut a patch releasebefore the stale pin blocks the next release build.
Watchdog run: https://github.com/pulseengine/sigil/actions/runs/28929173652