add nil check on block before parsing certs

steiza · Oct 17, 2024 · 98d2028 · 98d2028
1 parent e74e44e
commit 98d2028
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/cosign/cli/trustedroot/trustedroot.go b/cmd/cosign/cli/trustedroot/trustedroot.go
@@ -162,7 +162,7 @@ func parseCerts(path string) ([]*x509.Certificate, error) {
 		return nil, err
 	}
 
-	for block, contents := pem.Decode(contents); ; block, contents = pem.Decode(contents) {
+	for block, contents := pem.Decode(contents); block != nil; block, contents = pem.Decode(contents) {
 		cert, err := x509.ParseCertificate(block.Bytes)
 		if err != nil {
 			return nil, err