Merge pull request #12972 from reasonerjt/content-trust-check-tag

Check the tag in isArtifactSigned func
This commit is contained in:
Daniel Jiang 2020-09-06 13:38:32 +08:00 committed by GitHub
commit 062600ef6f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -21,6 +21,9 @@ var (
if err != nil {
return false, err
}
if len(art.Tag) > 0 {
return checker.IsTagSigned(art.Tag, art.Digest), nil
}
return checker.IsArtifactSigned(art.Digest), nil
}
)