cli: dynamically select signature validation pubkey for release and pre-release artifacts

This commit is contained in:
Malte Poll 2023-05-26 17:49:46 +02:00 committed by Malte Poll
parent ada66a64a1
commit 8a851c8f39
19 changed files with 170 additions and 145 deletions

View file

@ -22,6 +22,7 @@ import (
"github.com/edgelesssys/constellation/v2/internal/api/versionsapi"
"github.com/edgelesssys/constellation/v2/internal/cloud/cloudprovider"
"github.com/edgelesssys/constellation/v2/internal/sigstore"
"github.com/edgelesssys/constellation/v2/internal/variant"
)
@ -470,8 +471,8 @@ func TestMeasurementsFetchAndVerify(t *testing.T) {
m := M{}
hash, err := m.FetchAndVerify(
context.Background(), client,
hash, err := m.fetchAndVerify(
context.Background(), client, sigstore.CosignVerifier{},
measurementsURL, signatureURL,
cosignPublicKey,
tc.imageVersion,