Remove the preallocation of signatures slice. (#869)

This was making codeql upset. I don't think there's a real issue, but better safe than sorry. Signed-off-by: Dan Lorenc <[email protected]>
sigstore · Oct 11, 2021 · cc4ce1b · cc4ce1b
1 parent 2ba1605
commit cc4ce1b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/cosign/tuf/policy.go b/pkg/cosign/tuf/policy.go
@@ -174,7 +174,7 @@ func (s *Signed) AddOrUpdateSignature(signature Signature) error {
 	if !root.ValidKey(signature.KeyID, "root") {
 		return errors.New("invalid root key")
 	}
-	signatures := make([]Signature, 0, len(s.Signatures)+1)
+	signatures := []Signature{}
 	for _, sig := range s.Signatures {
 		if sig.KeyID != signature.KeyID {
 			signatures = append(signatures, sig)