Allow deprecated key type currently in use by staging infrastructure

Signed-off-by: Zach Steindler <steiza@github.com>
sigstore · Mar 28, 2024 · 5f7e2d2 · 5f7e2d2
1 parent 0433bd3
commit 5f7e2d2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/root/trusted_root.go b/pkg/root/trusted_root.go
@@ -154,7 +154,8 @@ func ParseTransparencyLogs(tlogs []*prototrustroot.TransparencyLogInstance) (tra
 				PublicKey:         ecKey,
 				SignatureHashFunc: crypto.SHA256,
 			}
-		case protocommon.PublicKeyDetails_PKCS1_RSA_PKCS1V5:
+		// This key format is deprecated, but currently in use for Sigstore staging instance
+		case protocommon.PublicKeyDetails_PKCS1_RSA_PKCS1V5: //nolint:staticcheck
 			key, err := x509.ParsePKCS1PublicKey(tlog.GetPublicKey().GetRawBytes())
 			if err != nil {
 				return nil, err