confidential-containers / guest-components

Confidential Containers Guest Tools and Components
Apache License 2.0
83 stars 95 forks source link

image-rs: update cosign signature verification unit test #658

Closed Xynnn007 closed 3 months ago

Xynnn007 commented 3 months ago

This commit deletes a duplicated unit case for cosign signature scheme.

Also, the original cosign signed test image is based on busybox, thus a successfully pulling for that image (busybox) via nydus-snapshotter would cause another pulling with policy preventing the image successful. This is because of some logic inside nydus-snapshotter.

To handle this, we update the signed image to be a different one from busybox. Separately we will fix this on the snapshotter side.

cc @stevenhorsman