Skip to content

Commit b8fe189

Browse files
committed
Checking if signer has cert in cosign sign
1 parent 8d30716 commit b8fe189

File tree

2 files changed

+2
-12
lines changed

2 files changed

+2
-12
lines changed

cmd/cosign/cli/sign/sign.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -294,7 +294,7 @@ func signDigest(ctx context.Context, digest name.Digest, payload []byte, ko opti
294294
}
295295

296296
if signOpts.OutputCertificate != "" {
297-
rekorBytes, err := sv.Bytes(ctx)
297+
rekorBytes, err := extractCertificate(ctx,sv)
298298
if err != nil {
299299
return fmt.Errorf("create certificate file: %w", err)
300300
}

cmd/cosign/cli/sign/sign_blob.go

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -244,17 +244,7 @@ func SignBlobCmd(ro *options.RootOptions, ko options.KeyOpts, payloadPath string
244244
return nil, fmt.Errorf("create certificate file: %w", err)
245245
}
246246
ui.Infof(ctx, "Wrote certificate to file %s", outputCertificate)
247-
} else {
248-
pemBytes, err := sigs.PublicKeyPem(sv, signatureoptions.WithContext(ctx))
249-
if err != nil {
250-
return nil, err
251-
}
252-
if err := os.WriteFile(outputCertificate, pemBytes, 0600); err != nil {
253-
return nil, err
254-
}
255-
return pemBytes, nil
256-
}
257-
247+
}
258248
}
259249

260250
return sig, nil

0 commit comments

Comments
 (0)