Skip to main content

Image signing report refused

typehttps://docs.frem.sh/reference/api/errors/image-signing-report-refused
HTTP status403 Forbidden

What it means

POST /attestations/image-signing is an internal endpoint of fremforge’s own release process. Customer credentials cannot use it: every personal access token, API token and runner job token of a customer organisation gets this error.

Example detail messages returned with this error:

  • This is an internal endpoint of fremforge’s release process; customer credentials cannot use it.

What to do

Nothing. Customer credentials cannot use this endpoint. To sign and verify your own images, see Image signatures: sign with cosign, enforce at pull.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/image-signing-report-refused",
  "title": "Forbidden",
  "status": 403,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.

Ids requiredInsert failed