# RubyGems.org: Gem pushes with attestation failing

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2025-10-15 06:56 UTC · Resolved: 2025-10-27 21:05 UTC · Duration: 13 d
- Updates: 5 · Affected components: Application
- [Vendor status page: https://stspg.io/twylv2mx6ysh](https://stspg.io/twylv2mx6ysh)
- [Company: RubyGems.org](https://rewindex.com/company/rubygems.md)

## Timeline of updates

- **identified** 2025-10-15 06:56 UTC: Gem pushes utilising the attestation feature are failing and will respond with an application error. We've identified the issue and are currently working to push a fix.
- **identified** 2025-10-15 23:04 UTC: We have implemented a fix for gem pushes that use attestations on rubygems.org. However, gems that rely on the release-gem GitHub Action (https://github.com/rubygems/release-gem) to deploy to rubygems.org will still experience errors. The release-gem action will automatically retry pushing to rubygems.org without attestations, which continue to function as expected. We are closely monitoring the situation and collaborating with the Sigstore team to resolve this issue.
- **identified** 2025-10-17 02:15 UTC: We're continuing to work with the sigstore team to help resolve users being unable to gem pushes with attestations. For the time being, we recommend users update their workflows to retry gem pushes without attestations.
- **identified** 2025-10-27 20:15 UTC: This issue has been resolved. Please ensure that you're using the latest version of the https://github.com/rubygems/release-gem in your Github Actions tasks.
- **resolved** 2025-10-27 21:05 UTC: This incident has been resolved.


---
Canonical: https://rewindex.com/company/rubygems/incidents/5r3wp6tnf5xp · Markdown: https://rewindex.com/company/rubygems/incidents/5r3wp6tnf5xp.md · JSON: https://rewindex.com/api/v1/companies/rubygems/incidents/5r3wp6tnf5xp · Generated 2026-10-20T01:32:18.486Z