From c564ee91c8ec53829724e92ddf4d12ecb39336ab Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Wed, 2 Sep 2026 12:14:43 +0200
Subject: [PATCH] sigstore: retry TUF metadata fetches

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 src/sigstore/sigstore.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/sigstore/sigstore.ts b/src/sigstore/sigstore.ts
index e86745e5..13333d17 100644
--- a/src/sigstore/sigstore.ts
+++ b/src/sigstore/sigstore.ts
@@ -380,7 +380,9 @@ export class Sigstore {
     const bundle = bundleFromJSON(parsedBundle);
 
     core.info(`Fetching Sigstore TUF trusted root metadata`);
-    const trustedRoot = await tuf.getTrustedRoot();
+    const trustedRoot = await tuf.getTrustedRoot({
+      retry: {retries: 5}
+    });
     const trustMaterial = toTrustMaterial(trustedRoot);
 
     try {