Recordsgolanggithub.com/smallstep/pkcs7failure issue
Failure signature
PROJECT_COMPILE exit 1 ×1
test/contract.go:<n>:<n>: undefined: scep.BadCertId (but have BadCertID)
Evidence quality: complete · go/compiler · compiler-diagnostic · outer go run · First recorded: 2026-08-30 · Last seen: 2026-08-30
sha256:0110984809f1…
Where it was measured
PASS means the release recorded a passing observation at PROJECT_COMPILE and no record of this failure. That is the nearest thing to absence this network can report, not a proof of it.
- v0.2.3 not measured
- v0.2.1 not measured
- v0.0.0-20231024181729-3b98ecc1ca81 FAIL
Where it reproduced
- os=linux · runtime=go@1.26 ×1 2026-08-30 → 2026-08-30
Nearest known PASS/FAIL boundaries
No release either side of this failure recorded a passing observation at this stage, so where it starts and stops is not established.
Dependency versions across releases
What each release of this package resolved its children to. A child whose version moved is listed first: that is where an upgrade changed something underneath you.
| Library | v0.2.3 | v0.2.1 | v0.0.0-20231024181729-3b98ecc1ca81 |
|---|---|---|---|
| golang.org/x/crypto | — | v0.52.0 | — |
Moved: 0 · unchanged at every release: 1
An edge records that a resolver placed one release beside another on a real machine. It is not a claim that the two work together; that question is answered by samples and contracts, not by presence here.
Evidence gaps
- No release in this window recorded a passing observation at PROJECT_COMPILE.
- Releases in this window never measured at PROJECT_COMPILE: 2
- No failure domain was inferred for this failure.
Published answers for the affected releases
- github.com/smallstep/pkcs7 v0.0.0-20231024181729-3b98ecc1ca81: SignerInfoConfig This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgithub.com/smallstep/pkcs7.SignerInfoConfig MIT-0 · 2026-08-26
- github.com/smallstep/pkcs7 v0.0.0-20231024181729-3b98ecc1ca81: Parse This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgithub.com/smallstep/pkcs7.Parse MIT-0 · 2026-08-26
- github.com/smallstep/pkcs7 v0.0.0-20231024181729-3b98ecc1ca81: PKCS7 This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgithub.com/smallstep/pkcs7.PKCS7 MIT-0 · 2026-08-26