From a2540a194637bb64a01ab139ff74ebdcf926f4f6 Mon Sep 17 00:00:00 2001
From: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
Date: Wed, 20 Mar 2024 09:42:23 -0700
Subject: [PATCH] chore: Update changelog for #3350 (#3401)

# Summary

Update changelog for #3350

## Testing Process

...

## Checklist

- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)
- [ ] Add a reference to related issues in the PR description.
- [ ] Update documentation if applicable.
- [ ] Add unit tests if applicable.
- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
---
 README.md | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/README.md b/README.md
index c6d632fc4e..852df654c2 100644
--- a/README.md
+++ b/README.md
@@ -27,6 +27,8 @@
   - [Installation](#installation)
   - [Inputs](#inputs)
   - [Command line examples](#command-line-examples)
+- [Known Issues](#known-issues)
+  - [error updating to TUF remote mirror: invalid](#error-updating-to-tuf-remote-mirror-invalid)
 - [Build Your Own Builder](#build-your-own-builder)
 - [Project Roadmap](#project-roadmap)
 - [Technical design](#technical-design)
@@ -199,6 +201,20 @@ The inputs of the verifier are described in [slsa-framework/slsa-verifier#availa
 
 A command line example is provided in [slsa-framework/slsa-verifier#example](https://github.com/slsa-framework/slsa-verifier#example).
 
+## Known Issues
+
+### error updating to TUF remote mirror: invalid
+
+This will occur only when generating provenance with all builders and generators.
+
+**Affected versions:** all versions up and including v1.9.0
+
+```shell
+error updating to TUF remote mirror: invalid
+```
+
+This issue is tracked by [issue #3350](https://github.com/slsa-framework/slsa-github-generator/issues/3350). You _must_ update to the newest patch versions of each minor release to fix this issue.
+
 ## Build Your Own Builder
 
 Use the [BYOB framework](BYOB.md) to create your own SLSA builder on GitHub. If you have an existing GitHub Action, you can use the BYOB framework to wrap it into a SLSA builder.