fix: handle empty trust policies

ratify-project · May 1, 2024 · 2d9b93a · 2d9b93a
1 parent a884308
commit 2d9b93a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/verifier/cosign/cosign.go b/pkg/verifier/cosign/cosign.go
@@ -146,7 +146,8 @@ func (f *cosignVerifierFactory) Create(_ string, verifierConfig config.VerifierC
 
 	var trustPolicies *TrustPolicies
 	legacy := true
-	if config.KeyRef == "" && config.RekorURL == "" {
+	// if trustPolicies are provided and non-legacy, create the trust policies
+	if config.KeyRef == "" && config.RekorURL == "" && len(config.TrustPolicies) > 0 {
 		trustPolicies, err = CreateTrustPolicies(config.TrustPolicies, verifierName)
 		if err != nil {
 			return nil, err