feat: update keyless verify 2

Signed-off-by: Juncheng Zhu <[email protected]>
ratify-project · Feb 14, 2025 · 414a753 · 414a753
1 parent 062bfe8
commit 414a753
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cosign/verifier.go b/cosign/verifier.go
@@ -151,6 +151,7 @@ func updateRepoSigVerifierKeys(repo string, opts *cosign.CheckOpts, keysMap map[
 	if !exists {
 		// Use the Fulcio root certificate for keyless verification
 		// TODO: support passing certChain and no CARoots
+		opts.SigVerifier = nil
 		roots, err := fulcio.GetRoots()
 		if err != nil || roots == nil {
 			return err