Skip to content

Commit 94b8be5

Browse files
committed
Checking if signer has cert in cosign sign
1 parent 8002de8 commit 94b8be5

File tree

2 files changed

+2
-12
lines changed

2 files changed

+2
-12
lines changed

cmd/cosign/cli/sign/sign.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -294,7 +294,7 @@ func signDigest(ctx context.Context, digest name.Digest, payload []byte, ko opti
294294
}
295295

296296
if signOpts.OutputCertificate != "" {
297-
rekorBytes, err := sv.Bytes(ctx)
297+
rekorBytes, err := extractCertificate(ctx,sv)
298298
if err != nil {
299299
return fmt.Errorf("create certificate file: %w", err)
300300
}

cmd/cosign/cli/sign/sign_blob.go

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -241,17 +241,7 @@ func SignBlobCmd(ro *options.RootOptions, ko options.KeyOpts, payloadPath string
241241
return nil, fmt.Errorf("create certificate file: %w", err)
242242
}
243243
ui.Infof(ctx, "Wrote certificate to file %s", outputCertificate)
244-
} else {
245-
pemBytes, err := sigs.PublicKeyPem(sv, signatureoptions.WithContext(ctx))
246-
if err != nil {
247-
return nil, err
248-
}
249-
if err := os.WriteFile(outputCertificate, pemBytes, 0600); err != nil {
250-
return nil, err
251-
}
252-
return pemBytes, nil
253-
}
254-
244+
}
255245
}
256246

257247
return sig, nil

0 commit comments

Comments
 (0)