GHSA-6W7G-P4JH-RF92 "Verify All" Returns Success Despite Validation Failures in Singularity

Impact The --all / -a option to singularity verify returns success even when some objects in a SIF container are not signed, or cannot be verified. The SIF objects that are not verified are reported in WARNING log messages, but a Container Verified message and exit code of 0 are returned. Workflo...

PT-2020-13727

Name of the Vulnerable Software and Affected Versions Sylabs Singularity versions 3.5.0 through 3.5.3 Description The issue arises when the --all / -a option is used with singularity verify, as it returns a success message even if some objects in a SIF container are not signed or cannot be...