Lucene search
+L

2 matches found

OSV
OSV
added 2025/02/14 5:19 p.m.56 views

GHSA-FGW4-V983-MGP8 `gh attestation verify` returns incorrect exit code during verification if no attestations are present

Summary A bug in GitHub's Artifact Attestation CLI tool, gh attestation verify, may return an incorrect zero exit status when no matching attestations are found for the specified --predicate-type or the default https://slsa.dev/provenance/v1 if not specified. This issue only arises if an artifact...

6.3CVSS6.4AI score0.00392EPSS
SaveExploits0References5
Rows per page
Query Builder