From 1d16bfca499152aa86ff5f5609deafc4522613c5 Mon Sep 17 00:00:00 2001 From: Shunsuke Suzuki Date: Sun, 22 Sep 2024 19:43:35 +0900 Subject: [PATCH] fix: close files (#3109) --- pkg/cosign/verify.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkg/cosign/verify.go b/pkg/cosign/verify.go index 1c13c6046..9f912fb2f 100644 --- a/pkg/cosign/verify.go +++ b/pkg/cosign/verify.go @@ -69,6 +69,7 @@ func (v *Verifier) downloadFile(ctx context.Context, logE *logrus.Entry, rt *run return fileName, nil } +// art is used to render the template. func (v *Verifier) Verify(ctx context.Context, logE *logrus.Entry, rt *runtime.Runtime, file *download.File, cos *registry.Cosign, art *template.Artifact, verifiedFilePath string) error { if v.disabled { logE.Debug("verification with cosign is disabled") @@ -167,6 +168,7 @@ func (v *Verifier) downloadCosignFile(ctx context.Context, logE *logrus.Entry, f if err != nil { return fmt.Errorf("get a readcloser: %w", err) } + defer rc.Close() if _, err := io.Copy(tf, rc); err != nil { return fmt.Errorf("download a file: %w", err) }