Skip to content

Handle whitespace-only certificate annotation#4760

Merged
Hayden-IO merged 1 commit into
sigstore:mainfrom
Hayden-IO:fix-sig-cert-crash
Mar 10, 2026
Merged

Handle whitespace-only certificate annotation#4760
Hayden-IO merged 1 commit into
sigstore:mainfrom
Hayden-IO:fix-sig-cert-crash

Conversation

@Hayden-IO
Copy link
Copy Markdown
Contributor

Without this change, a certificate annotation for a signed container that contains only whitespace will trigger a panic, because LoadCertificatesFromPEM doesn't throw an error with an empty or whitespace-only string.

Thanks to Ziyu Lin for reporting this.

Summary

Release Note

Documentation

Without this change, a certificate annotation for a signed container
that contains only whitespace will trigger a panic, because
LoadCertificatesFromPEM doesn't throw an error with an empty or
whitespace-only string.

Thanks to Ziyu Lin for reporting this.

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
@Hayden-IO Hayden-IO requested a review from a team as a code owner March 9, 2026 18:34
@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 36.47%. Comparing base (2ef6022) to head (70716d2).
⚠️ Report is 694 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4760      +/-   ##
==========================================
- Coverage   40.10%   36.47%   -3.63%     
==========================================
  Files         155      220      +65     
  Lines       10044    12766    +2722     
==========================================
+ Hits         4028     4657     +629     
- Misses       5530     7403    +1873     
- Partials      486      706     +220     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@Hayden-IO Hayden-IO merged commit a09afa9 into sigstore:main Mar 10, 2026
29 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants