From 48e71bc7361cc84e2c737032db9442d9bae624a0 Mon Sep 17 00:00:00 2001 From: Patrick Zheng Date: Fri, 25 Aug 2023 14:53:12 +0800 Subject: [PATCH] fix Signed-off-by: Patrick Zheng --- notation.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/notation.go b/notation.go index cce31d7a..3efe8872 100644 --- a/notation.go +++ b/notation.go @@ -360,7 +360,7 @@ func Verify(ctx context.Context, verifier Verifier, repo registry.Repository, ve logger.Debug("Fetching signature manifests") err = repo.ListSignatures(ctx, artifactDescriptor, func(signatureManifests []ocispec.Descriptor) error { // process signatures - for _, sigManifestDesc := range signatureManifests { + for ind, sigManifestDesc := range signatureManifests { if numOfSignatureProcessed >= verifyOpts.MaxSignatureAttempts { break } @@ -383,7 +383,7 @@ func Verify(ctx context.Context, verifier Verifier, repo registry.Repository, ve logger.Error("Got nil outcome. Expecting non-nil outcome on verification failure") return err } - outcome.SignatureManifestDescriptor = &sigManifestDesc + outcome.SignatureManifestDescriptor = &signatureManifests[ind] outcomeCopy := *outcome verificationOutcomes = append(verificationOutcomes, &outcomeCopy) continue @@ -392,7 +392,7 @@ func Verify(ctx context.Context, verifier Verifier, repo registry.Repository, ve verificationSucceeded = true // on success, verificationOutcomes only contains the // succeeded outcome - outcome.SignatureManifestDescriptor = &sigManifestDesc + outcome.SignatureManifestDescriptor = &signatureManifests[ind] verificationOutcomes = []*VerificationOutcome{outcome} logger.Debugf("Signature verification succeeded for artifact %v with signature digest %v", artifactDescriptor.Digest, sigManifestDesc.Digest)