Verify-dockerfile Ignore scratch images (#509)

Signed-off-by: Russell Brown <rjbrown57@gmail.com>
sigstore · Jul 30, 2021 · 4877fbb · 4877fbb
1 parent f3cf4a2
commit 4877fbb
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/cmd/cosign/cli/verify_dockerfile.go b/cmd/cosign/cli/verify_dockerfile.go
@@ -118,7 +118,12 @@ func getImagesFromDockerfile(dockerfile io.Reader) ([]string, error) {
 	for fileScanner.Scan() {
 		line := strings.TrimSpace(fileScanner.Text())
 		if strings.HasPrefix(line, "FROM") {
-			images = append(images, getImageFromLine(line))
+			switch image := getImageFromLine(line); image {
+			case "scratch":
+				fmt.Fprintln(os.Stderr, "- scratch image ignored")
+			default:
+				images = append(images, image)
+			}
 		}
 	}
 	if err := fileScanner.Err(); err != nil {