shim in Leap 15.1 build failed recently, the error log:

[   60s] + chmod 755 /home/abuild/rpmbuild/SOURCES/timestamp.pl
[   60s] + test -n /home/abuild/rpmbuild/SOURCES/signature-opensuse.asc
[   60s] + head -1 /home/abuild/rpmbuild/SOURCES/signature-opensuse.asc
[   60s] + cp shim.efi shim.efi.bak
[   60s] + /home/abuild/rpmbuild/SOURCES/timestamp.pl --set-from-file
/home/abuild/rpmbuild/SOURCES/signature-opensuse.asc shim.efi
[   60s] + pesign -h -P -i shim.efi
[   60s] + cat hash1 hash2
[   60s] hash: 3be8e7eb348d35c1928f19c769846788991641d1f6cf09514ca10269934f7359
[   60s] hash: 162c2814c4319dad606e51b9bb5041a5e7ba126ce183794a5ddf439798973bca
[   60s] + cmp -s hash1 hash2
[   60s] + echo 'ERROR: opensuse binary changed, need to request new
signature!'
[   60s] ERROR: opensuse binary changed, need to request new signature!
[   60s] + false

This is not caught in staging project period because shim_enforce_ms_signature
is not set.