fix nil pointer deref in cli/upload.BlobCmd (#563)

calling 'cosign upload blob ...' with an image address but without any -f arguments lead to a nil pointer dereference; check that at least one file was provided

Signed-off-by: Anton Semjonov <[email protected]>

cmd/cosign/cli/upload/blob.go

@@ -17,6 +17,7 @@ package upload
 
 import (
 	"context"
+	"errors"
 	"flag"
 	"fmt"
 	"os"
@@ -83,7 +84,7 @@ EXAMPLES
   `,
 		FlagSet: flagset,
 		Exec: func(ctx context.Context, args []string) error {
-			if len(args) != 1 {
+			if len(args) != 1 || len(fmap.Files) < 1 {
 				return flag.ErrHelp
 			}
 
@@ -102,6 +103,9 @@ func BlobCmd(ctx context.Context, files []cremote.File, contentType, imageRef st
 	if err != nil {
 		return err
 	}
+	if dgster == nil {
+		return errors.New("dgstr is nil, no files uploaded?")
+	}
 	dgst, err := dgster.Digest()
 	if err != nil {
 		return err