fixup! Download and verify cosign signatures

This commit is contained in:
Alexis Métaireau 2025-02-25 15:44:24 +01:00
parent 4073a62fd4
commit 30ec1f10e9

View file

@ -377,7 +377,7 @@ def store_signatures(signatures: list[Dict], image_digest: str, pubkey: str) ->
if f"sha256:{image_digest}" != digests[0]:
raise errors.SignatureMismatch(
f"Signatures do not match the given image digest ({image_digest}, {digests[0]})"
f"Signatures do not match the given image digest (sha256:{image_digest}, {digests[0]})"
)
pubkey_signatures = SIGNATURES_PATH / get_file_digest(pubkey)