diff --git a/notation.go b/notation.go index 9341900d..cce31d7a 100644 --- a/notation.go +++ b/notation.go @@ -384,8 +384,8 @@ func Verify(ctx context.Context, verifier Verifier, repo registry.Repository, ve return err } outcome.SignatureManifestDescriptor = &sigManifestDesc - outcomeCopy := outcome - verificationOutcomes = append(verificationOutcomes, outcomeCopy) + outcomeCopy := *outcome + verificationOutcomes = append(verificationOutcomes, &outcomeCopy) continue } // at this point, the signature is verified successfully