check status code in fulcio prober (#887)

Signed-off-by: Hector Fernandez <hector@chainguard.dev>
sigstore · Dec 5, 2023 · 4aacfb5 · 4aacfb5
1 parent f2b97f5
commit 4aacfb5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/cmd/prober/write.go b/cmd/prober/write.go
@@ -100,6 +100,11 @@ func fulcioWriteEndpoint(ctx context.Context, priv *ecdsa.PrivateKey) (*x509.Cer
 	}
 	defer resp.Body.Close()
 
+	if resp.StatusCode != http.StatusOK {
+		body, _ := io.ReadAll(resp.Body)
+		return nil, fmt.Errorf("invalid status code '%s' when requesting a cert from Fulcio with body '%s'", resp.Status, string(body))
+	}
+
 	responseBody, err := io.ReadAll(resp.Body)
 	if err != nil {
 		Logger.Errorf("error reading response from Fulcio: %v", err)