Skip to content

Instantly share code, notes, and snippets.

@Brend-Smits

Brend-Smits/cosign-sign-verbose

Last active March 17, 2022 11:52
Show Gist options
  • Save Brend-Smits/0728853ba905897d1e74efc819eff7c6 to your computer and use it in GitHub Desktop.
Save Brend-Smits/0728853ba905897d1e74efc819eff7c6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
cosign-sign-verbose
$ COSIGN_DOCKER_MEDIA_TYPES=1 COSIGN_PASSWORD="$(cat /k/team/sssc/slsa-workflow-examples/cosign-password.txt)" cosign sign --verbose --key /k/team/sssc/slsa-workflow-examples/cosign.key my-docker.artifactory.my-org.com/slsa-workflow-examples/awesome-nuget-cli:latest
2022/03/17 12:49:38 --> GET https://my-docker.artifactory.my-org.com/v2/
2022/03/17 12:49:38 GET /v2/ HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Accept-Encoding: gzip
2022/03/17 12:49:38 <-- 401 https://my-docker.artifactory.my-org.com/v2/ (252.3138ms)
2022/03/17 12:49:38 HTTP/1.1 401 Unauthorized
Content-Length: 87
Connection: keep-alive
Content-Type: application/json;charset=ISO-8859-1
Date: Thu, 17 Mar 2022 11:49:39 GMT
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
Www-Authenticate: Bearer realm="https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token",service="my-docker.artifactory.my-org.com:443"
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
{"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":null}]}
2022/03/17 12:49:38 --> GET https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apull&service=my-docker.artifactory.my-org.com%3A443 [body redacted: basic token response contains credentials]
2022/03/17 12:49:38 GET /artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apull&service=my-docker.artifactory.my-org.com%3A443 HTTP/1.1
Host: my-docker.artifactory.my-org.com:443
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:49:43 <-- 200 https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apull&service=my-docker.artifactory.my-org.com%3A443 (4.5892174s) [body redacted: basic token response contains credentials]
2022/03/17 12:49:43 HTTP/1.1 200 OK
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: application/json
Date: Thu, 17 Mar 2022 11:49:44 GMT
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:49:43 --> GET https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest
2022/03/17 12:49:43 GET /v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Accept: application/vnd.docker.distribution.manifest.v1+json,application/vnd.docker.distribution.manifest.v1+prettyjws,application/vnd.docker.distribution.manifest.v2+json,application/vnd.oci.image.manifest.v1+json,application/vnd.docker.distribution.manifest.list.v2+json,application/vnd.oci.image.index.v1+json
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:49:43 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest (115.1734ms)
2022/03/17 12:49:43 HTTP/1.1 200 OK
Content-Length: 737
Accept-Ranges: bytes
Cache-Control: no-store
Connection: keep-alive
Content-Disposition: attachment; filename="manifest.json"
Content-Type: application/vnd.docker.distribution.manifest.v2+json
Date: Thu, 17 Mar 2022 11:49:44 GMT
Docker-Content-Digest: sha256:89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee
Docker-Distribution-Api-Version: registry/2.0
Etag: 6de027e4b5e3fadd7d7d9d862b910bddd81c93a7
Last-Modified: Thu, 17 Mar 2022 08:15:47 GMT
Server: Artifactory/6.12.0
X-Artifactory-Filename: manifest.json
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
X-Checksum-Md5: 924bf5428cbbab8120e7eb0926aef5a8
X-Checksum-Sha1: 6de027e4b5e3fadd7d7d9d862b910bddd81c93a7
X-Checksum-Sha256: 89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee
{
"schemaVersion": 2,
"mediaType": "application/vnd.docker.distribution.manifest.v2+json",
"config": {
"mediaType": "application/vnd.docker.container.image.v1+json",
"size": 619,
"digest": "sha256:e883c5e0f18528e8907e12fbe0a3908f180d3dc4968288aefab38d63f5de4b59"
},
"layers": [
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"size": 803833,
"digest": "sha256:2df365faf0e3007f983fadd7a65ba51d41b488eb2ed8fc70f4bf97043cfea560"
},
{
"mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
"size": 7975726,
"digest": "sha256:676ef4227e002b3aa830373ce00d3d77ad026131281ac24264b5555754e1d62f"
}
]
}
Pushing signature to: my-docker.artifactory.my-org.com/slsa-workflow-examples/awesome-nuget-cli
2022/03/17 12:49:43 --> GET https://my-docker.artifactory.my-org.com/v2/
2022/03/17 12:49:43 GET /v2/ HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Accept-Encoding: gzip
2022/03/17 12:49:43 <-- 401 https://my-docker.artifactory.my-org.com/v2/ (49.4118ms)
2022/03/17 12:49:43 HTTP/1.1 401 Unauthorized
Content-Length: 87
Connection: keep-alive
Content-Type: application/json;charset=ISO-8859-1
Date: Thu, 17 Mar 2022 11:49:44 GMT
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
Www-Authenticate: Bearer realm="https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token",service="my-docker.artifactory.my-org.com:443"
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
{"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":null}]}
2022/03/17 12:49:43 --> GET https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apull&service=my-docker.artifactory.my-org.com%3A443 [body redacted: basic token response contains credentials]
2022/03/17 12:49:43 GET /artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apull&service=my-docker.artifactory.my-org.com%3A443 HTTP/1.1
Host: my-docker.artifactory.my-org.com:443
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:49:48 <-- 200 https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apull&service=my-docker.artifactory.my-org.com%3A443 (4.3430277s) [body redacted: basic token response contains credentials]
2022/03/17 12:49:48 HTTP/1.1 200 OK
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: application/json
Date: Thu, 17 Mar 2022 11:49:48 GMT
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:49:48 --> GET https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/sha256-89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee.sig
2022/03/17 12:49:48 GET /v2/slsa-workflow-examples/awesome-nuget-cli/manifests/sha256-89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee.sig HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Accept: application/vnd.docker.distribution.manifest.v1+json,application/vnd.docker.distribution.manifest.v1+prettyjws,application/vnd.docker.distribution.manifest.v2+json,application/vnd.oci.image.manifest.v1+json,application/vnd.docker.distribution.manifest.list.v2+json,application/vnd.oci.image.index.v1+json
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:49:48 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/sha256-89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee.sig (82.2371ms)
2022/03/17 12:49:48 HTTP/1.1 200 OK
Content-Length: 574
Accept-Ranges: bytes
Cache-Control: no-store
Connection: keep-alive
Content-Disposition: attachment; filename="manifest.json"
Content-Type: application/vnd.docker.distribution.manifest.v2+json
Date: Thu, 17 Mar 2022 11:49:49 GMT
Docker-Content-Digest: sha256:7ec964aa3ab7c6ed7ba26ae6e9e990e60849186cafe4a8b0eff83298aeca0599
Docker-Distribution-Api-Version: registry/2.0
Etag: 013495d07e20f6a5366f002a78d77dc1f2160dc0
Last-Modified: Thu, 17 Mar 2022 11:30:40 GMT
Server: Artifactory/6.12.0
X-Artifactory-Filename: manifest.json
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
X-Checksum-Md5: 00c23bbbb2dc5acf4d1033a63544731e
X-Checksum-Sha1: 013495d07e20f6a5366f002a78d77dc1f2160dc0
X-Checksum-Sha256: 7ec964aa3ab7c6ed7ba26ae6e9e990e60849186cafe4a8b0eff83298aeca0599
{"schemaVersion":2,"mediaType":"application/vnd.docker.distribution.manifest.v2+json","config":{"mediaType":"application/vnd.docker.container.image.v1+json","size":233,"digest":"sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f"},"layers":[{"mediaType":"application/vnd.dev.cosign.simplesigning.v1+json","size":312,"digest":"sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722","annotations":{"dev.cosignproject.cosign/signature":"MEUCIDc92IbcGuVOxu9n/umvsYyFh9yGyxk3oRt0xtfcEqvpAiEA+9ZbP4o0dwRxTvWD8DjSAafG8AUuGxxE2+MFVMREoLs="}}]}
2022/03/17 12:49:48 --> GET https://my-docker.artifactory.my-org.com/v2/
2022/03/17 12:49:48 GET /v2/ HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Accept-Encoding: gzip
2022/03/17 12:49:48 <-- 401 https://my-docker.artifactory.my-org.com/v2/ (50.7519ms)
2022/03/17 12:49:48 HTTP/1.1 401 Unauthorized
Content-Length: 87
Connection: keep-alive
Content-Type: application/json;charset=ISO-8859-1
Date: Thu, 17 Mar 2022 11:49:49 GMT
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
Www-Authenticate: Bearer realm="https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token",service="my-docker.artifactory.my-org.com:443"
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
{"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":null}]}
2022/03/17 12:49:48 --> GET https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apush%2Cpull&service=my-docker.artifactory.my-org.com%3A443 [body redacted: basic token response contains credentials]
2022/03/17 12:49:48 GET /artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apush%2Cpull&service=my-docker.artifactory.my-org.com%3A443 HTTP/1.1
Host: my-docker.artifactory.my-org.com:443
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:49:52 <-- 200 https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apush%2Cpull&service=my-docker.artifactory.my-org.com%3A443 (4.3084433s) [body redacted: basic token response contains credentials]
2022/03/17 12:49:52 HTTP/1.1 200 OK
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: application/json
Date: Thu, 17 Mar 2022 11:49:53 GMT
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:49:52 --> GET https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f
2022/03/17 12:49:52 --> HEAD https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722
2022/03/17 12:49:52 GET /v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:49:52 HEAD /v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722 HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
2022/03/17 12:49:52 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f (117.8008ms)
2022/03/17 12:49:52 HTTP/1.1 200 OK
Content-Length: 233
Accept-Ranges: bytes
Connection: keep-alive
Content-Disposition: attachment; filename="sha256__e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f"
Content-Type: application/octet-stream
Date: Thu, 17 Mar 2022 11:49:53 GMT
Docker-Content-Digest: sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f
Docker-Distribution-Api-Version: registry/2.0
Etag: e0c6ba1cb0fb854dc28a42457dce216875fb7846
Last-Modified: Thu, 17 Mar 2022 11:30:39 GMT
Server: Artifactory/6.12.0
X-Artifactory-Filename: sha256__e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
X-Checksum-Md5: 57f410e3080007b2fd296fdb73ba6257
X-Checksum-Sha1: e0c6ba1cb0fb854dc28a42457dce216875fb7846
X-Checksum-Sha256: e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f
{"architecture":"","created":"0001-01-01T00:00:00Z","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722"]},"config":{}}
2022/03/17 12:49:52 --> HEAD https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f
2022/03/17 12:49:52 HEAD /v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
2022/03/17 12:49:52 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722 (172.3113ms)
2022/03/17 12:49:52 HTTP/1.1 200 OK
Content-Length: 312
Connection: keep-alive
Content-Type: application/octet-stream
Date: Thu, 17 Mar 2022 11:49:53 GMT
Docker-Content-Digest: sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:49:53 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f (133.3918ms)
2022/03/17 12:49:53 HTTP/1.1 200 OK
Content-Length: 233
Connection: keep-alive
Content-Type: application/octet-stream
Date: Thu, 17 Mar 2022 11:49:53 GMT
Docker-Content-Digest: sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:49:53 --> PUT https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/sha256-89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee.sig
2022/03/17 12:49:53 PUT /v2/slsa-workflow-examples/awesome-nuget-cli/manifests/sha256-89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee.sig HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Content-Length: 574
Authorization: <redacted>
Content-Type: application/vnd.docker.distribution.manifest.v2+json
Accept-Encoding: gzip
{"schemaVersion":2,"mediaType":"application/vnd.docker.distribution.manifest.v2+json","config":{"mediaType":"application/vnd.docker.container.image.v1+json","size":233,"digest":"sha256:e963184653d8fb93ad66679a95621afe619e182edb606e872bd07f51d55e297f"},"layers":[{"mediaType":"application/vnd.dev.cosign.simplesigning.v1+json","size":312,"digest":"sha256:f029e0e4daa35701e6c7fc6c09eb2fc45ef2c799412d4fd573a0f8c613762722","annotations":{"dev.cosignproject.cosign/signature":"MEUCIDc92IbcGuVOxu9n/umvsYyFh9yGyxk3oRt0xtfcEqvpAiEA+9ZbP4o0dwRxTvWD8DjSAafG8AUuGxxE2+MFVMREoLs="}}]}
2022/03/17 12:49:53 <-- 201 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/sha256-89ffd1f793cd646638e4a390e7aa10456c81079d67c876c12e341a1143e972ee.sig (229.8533ms)
2022/03/17 12:49:53 HTTP/1.1 201 Created
Content-Length: 0
Connection: keep-alive
Date: Thu, 17 Mar 2022 11:49:54 GMT
Docker-Content-Digest: sha256:7ec964aa3ab7c6ed7ba26ae6e9e990e60849186cafe4a8b0eff83298aeca0599
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
Raw
cosign-upload-blob-verbose
$ COSIGN_DOCKER_MEDIA_TYPES=1 cosign upload blob --verbose -f README.md my-docker.artifactory.my-org.com/slsa-workflow-examples/awesome-nuget-cli
Uploading file from [README.md] to [my-docker.artifactory.my-org.com/slsa-workflow-examples/awesome-nuget-cli:latest] with media type [text/plain]
2022/03/17 12:44:09 --> GET https://my-docker.artifactory.my-org.com/v2/
2022/03/17 12:44:09 GET /v2/ HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Accept-Encoding: gzip
2022/03/17 12:44:10 <-- 401 https://my-docker.artifactory.my-org.com/v2/ (278.842ms)
2022/03/17 12:44:10 HTTP/1.1 401 Unauthorized
Content-Length: 87
Connection: keep-alive
Content-Type: application/json;charset=ISO-8859-1
Date: Thu, 17 Mar 2022 11:44:10 GMT
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
Www-Authenticate: Bearer realm="https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token",service="my-docker.artifactory.my-org.com:443"
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
{"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":null}]}
2022/03/17 12:44:10 --> GET https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apush%2Cpull&service=my-docker.artifactory.my-org.com%3A443 [body redacted: basic token response contains credentials]
2022/03/17 12:44:10 GET /artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apush%2Cpull&service=my-docker.artifactory.my-org.com%3A443 HTTP/1.1
Host: my-docker.artifactory.my-org.com:443
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
Accept-Encoding: gzip
2022/03/17 12:44:20 <-- 200 https://my-docker.artifactory.my-org.com:443/artifactory/api/docker/my-docker/v2/token?scope=repository%3Aslsa-workflow-examples%2Fawesome-nuget-cli%3Apush%2Cpull&service=my-docker.artifactory.my-org.com%3A443 (9.9257149s) [body redacted: basic token response contains credentials]
2022/03/17 12:44:20 HTTP/1.1 200 OK
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: application/json
Date: Thu, 17 Mar 2022 11:44:20 GMT
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:44:20 --> HEAD https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:8af5d0b13e3ae536a5f913ae9499ffde71970be45e580982789fa5519f17ef6d
2022/03/17 12:44:20 --> HEAD https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:85badabc574a727fe3e18d68ef572d2fd6932910cc0265a8d85c27d89a013349
2022/03/17 12:44:20 HEAD /v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:8af5d0b13e3ae536a5f913ae9499ffde71970be45e580982789fa5519f17ef6d HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
2022/03/17 12:44:20 HEAD /v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:85badabc574a727fe3e18d68ef572d2fd6932910cc0265a8d85c27d89a013349 HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Authorization: <redacted>
2022/03/17 12:44:21 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:8af5d0b13e3ae536a5f913ae9499ffde71970be45e580982789fa5519f17ef6d (937.5005ms)
2022/03/17 12:44:21 HTTP/1.1 200 OK
Content-Length: 233
Connection: keep-alive
Content-Type: application/octet-stream
Date: Thu, 17 Mar 2022 11:44:21 GMT
Docker-Content-Digest: sha256:8af5d0b13e3ae536a5f913ae9499ffde71970be45e580982789fa5519f17ef6d
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:44:21 <-- 200 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/blobs/sha256:85badabc574a727fe3e18d68ef572d2fd6932910cc0265a8d85c27d89a013349 (987.2004ms)
2022/03/17 12:44:21 HTTP/1.1 200 OK
Content-Length: 636
Connection: keep-alive
Content-Type: application/octet-stream
Date: Thu, 17 Mar 2022 11:44:21 GMT
Docker-Content-Digest: sha256:85badabc574a727fe3e18d68ef572d2fd6932910cc0265a8d85c27d89a013349
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
2022/03/17 12:44:21 --> PUT https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest
2022/03/17 12:44:21 PUT /v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest HTTP/1.1
Host: my-docker.artifactory.my-org.com
User-Agent: cosign/devel (windows; amd64) go-containerregistry/v0.7.1-0.20211203164431-c75901cce627
Content-Length: 311
Authorization: <redacted>
Content-Type: application/vnd.oci.image.manifest.v1+json
Accept-Encoding: gzip
{"schemaVersion":2,"config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":233,"digest":"sha256:8af5d0b13e3ae536a5f913ae9499ffde71970be45e580982789fa5519f17ef6d"},"layers":[{"mediaType":"text/plain","size":636,"digest":"sha256:85badabc574a727fe3e18d68ef572d2fd6932910cc0265a8d85c27d89a013349"}]}
2022/03/17 12:44:21 <-- 400 https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest (54.8545ms)
2022/03/17 12:44:21 HTTP/1.1 400 Bad Request
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: application/json
Date: Thu, 17 Mar 2022 11:44:21 GMT
Docker-Distribution-Api-Version: registry/2.0
Server: Artifactory/6.12.0
X-Artifactory-Id: 848d073c2a65478e:32e91868:17f3c1ee955:-8000
65
{"errors":[{"code":"MANIFEST_INVALID","message":"manifest invalid","detail":{"description":"null"}}]}
0
Error: PUT https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest: MANIFEST_INVALID: manifest invalid; map[description:null]
main.go:46: error during command execution: PUT https://my-docker.artifactory.my-org.com/v2/slsa-workflow-examples/awesome-nuget-cli/manifests/latest: MANIFEST_INVALID: manifest invalid; map[description:null]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment