Verify-dockerfile Ignore scratch images

Signed-off-by: Russell Brown <[email protected]>
sigstore · Jul 30, 2021 · 41005f5 · 41005f5
1 parent 0fdfaa9
commit 41005f5
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/cmd/cosign/cli/verify_dockerfile.go b/cmd/cosign/cli/verify_dockerfile.go
@@ -118,7 +118,12 @@ func getImagesFromDockerfile(dockerfile io.Reader) ([]string, error) {
 	for fileScanner.Scan() {
 		line := strings.TrimSpace(fileScanner.Text())
 		if strings.HasPrefix(line, "FROM") {
-			images = append(images, getImageFromLine(line))
+			switch image := getImageFromLine(line); image {
+			case "scratch":
+				fmt.Fprintln(os.Stderr, "- scratch image ignored")
+			default:
+				images = append(images,image)
+			}
 		}
 	}
 	if err := fileScanner.Err(); err != nil {