From 7078b65c4283aa1e5e9dc959be1908debe6e296d Mon Sep 17 00:00:00 2001
From: Brian DeHamer <bdehamer@github.com>
Date: Wed, 12 Jun 2024 11:57:18 -0700
Subject: [PATCH] config rekor to fetch on conflict

Signed-off-by: Brian DeHamer <bdehamer@github.com>
---
 RELEASES.md | 1 +
 src/sign.ts | 1 +
 2 files changed, 2 insertions(+)

diff --git a/RELEASES.md b/RELEASES.md
index 2988d76..8fad838 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -4,6 +4,7 @@
 
 - Dynamic construction of Sigstore API URLs
 - Switch to new GH provenance build type
+- Fetch existing Rekor entry on 409 conflict error
 - Bump @sigstore/bundle from 2.3.0 to 2.3.2
 - Bump @sigstore/sign from 2.3.0 to 2.3.2
 
diff --git a/src/sign.ts b/src/sign.ts
index aad916f..cb7119d 100644
--- a/src/sign.ts
+++ b/src/sign.ts
@@ -87,6 +87,7 @@ const initBundleBuilder = (opts: SignOptions): BundleBuilder => {
       new RekorWitness({
         rekorBaseURL: opts.rekorURL,
         entryType: 'dsse',
+        fetchOnConflict: true,
         timeout,
         retry
       })