Check for empty envelope

Signed-off-by: Zach Steindler <[email protected]>
sigstore · Oct 23, 2024 · 0fff093 · 0fff093
1 parent ff8128a
commit 0fff093
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/cosign/cli/verify/verify_bundle.go b/cmd/cosign/cli/verify/verify_bundle.go
@@ -277,7 +277,7 @@ func AssembleNewBundle(ctx context.Context, sigBytes, signedTimestamp []byte, en
 		}
 		var sigB64 string
 		var payload []byte
-		if envelope != nil {
+		if envelope != nil && len(envelope.Signatures) > 0 {
 			payload, err = json.Marshal(*envelope)
 			if err != nil {
 				return nil, err