Include SCT verification failure details in error message (#3799)

Signed-off-by: Slavek Kabrda <[email protected]>
sigstore · Jul 26, 2024 · 62a2cff · 62a2cff
1 parent c6cdf1b
commit 62a2cff
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/cosign/verify_sct.go b/pkg/cosign/verify_sct.go
@@ -108,7 +108,7 @@ func VerifySCT(_ context.Context, certPEM, chainPEM, rawSCT []byte, pubKeys *Tru
 			}
 			err = ctutil.VerifySCT(pubKeyMetadata.PubKey, []*ctx509.Certificate{cert, certChain[0]}, sct, true)
 			if err != nil {
-				return fmt.Errorf("error verifying embedded SCT")
+				return fmt.Errorf("error verifying embedded SCT: %w", err)
 			}
 			if pubKeyMetadata.Status != tuf.Active {
 				fmt.Fprintf(os.Stderr, "**Info** Successfully verified embedded SCT using an expired verification key\n")