diff --git a/verifiers/internal/gha/rekor.go b/verifiers/internal/gha/rekor.go index 9709fa8..cff45fc 100644 --- a/verifiers/internal/gha/rekor.go +++ b/verifiers/internal/gha/rekor.go @@ -51,12 +51,12 @@ var ( defaultRekorClientOnce = new(sync.Once) ) -// getDefaultRekorClient returns a cached Rekor client. -func getDefaultRekorClient() (*rekorGenClient.Rekor, error) { +// getRekorClient returns a cached Rekor client, with a retry count of 5. +func getRekorClient() (*rekorGenClient.Rekor, error) { var err error defaultRekorClientOnce.Do(func() { userAgent := fmt.Sprintf("slsa-verifier/%s (%s; %s)", version.GetVersionInfo().GitVersion, runtime.GOOS, runtime.GOARCH) - defaultRekorClient, err = rekorClient.GetRekorClient(defaultRekorAddr, rekorClient.WithUserAgent(userAgent)) + defaultRekorClient, err = rekorClient.GetRekorClient(defaultRekorAddr, rekorClient.WithUserAgent(userAgent), rekorClient.WithRetryCount(5)) if err != nil { defaultRekorClientOnce = new(sync.Once) return diff --git a/verifiers/internal/gha/verifier.go b/verifiers/internal/gha/verifier.go index f08de6f..891755d 100644 --- a/verifiers/internal/gha/verifier.go +++ b/verifiers/internal/gha/verifier.go @@ -214,8 +214,7 @@ func (v *GHAVerifier) VerifyArtifact(ctx context.Context, ) ([]byte, *utils.TrustedBuilderID, error) { isSigstoreBundle := IsSigstoreBundle(provenance) - // This includes a default retry count of 3. - rClient, err := getDefaultRekorClient() + rClient, err := getRekorClient() if err != nil { return nil, nil, err }