add functional tests for CARoots handling

Signed-off-by: Dmitry S <dsavints@gmail.com>
dmitris · Jun 18, 2024 · a2c7480 · a2c7480
1 parent 782abca
commit a2c7480
Show file tree

Hide file tree

Showing 2 changed files with 537 additions and 0 deletions.
diff --git a/cmd/cosign/cli/verify/verify.go b/cmd/cosign/cli/verify/verify.go
@@ -309,6 +309,9 @@ func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error) {
 			}
 			co.SCT = sct
 		}
+	default:
+		// Do nothing. Neither keyRef, c.Sk, nor certRef were set - can happen for example when using Fulcio and TSA.
+		// For an example see the TestAttachWithRFC3161Timestamp test in test/e2e_test.go.
 	}
 	co.SigVerifier = pubKey