mindersec / minder / 38256538695

65%

Build Type

push

github

Committed by web-flow

Commit Message

Return the tag's index digest from OCI GetDigest (#6862)

getDigestFromRef used remote.Image, which resolves a multi-arch tag to
its linux/amd64 manifest. GetRawManifest then fetched that child
instead of the index, and signature lookup used a digest that cosign
doesn't sign by default.

Use remote.Get so the digest is the tag's top-level descriptor.

Fixes #6829

Coverage Stats

4 of 4 new or added lines in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

22561 of 35282 relevant lines covered (63.94%)

52.5 hits per line