Add missing check

Signed-off-by: Guillaume J. Charmes <[email protected]>

assets/in

@@ -30,6 +30,7 @@ username=$(jq -r '.source.username // ""' < $payload)
 password=$(jq -r '.source.password // ""' < $payload)
 repository="$(jq -r '.source.repository // ""' < $payload)"
 tag="$(jq -r '.source.tag // "latest"' < $payload)"
+digest="$(jq -r '.source.digest // ""' < $payload)"
 ca_certs=$(jq -r '.source.ca_certs // []' < $payload)
 client_certs=$(jq -r '.source.client_certs // []' < $payload)
 max_concurrent_downloads=$(jq -r '.source.max_concurrent_downloads // 3' < $payload)
@@ -45,7 +46,8 @@ else
   registry=
 fi
 
-digest="$(jq -r '.version.digest' < $payload)"
+# If the source digest is set, it takes precedence.
+[ -z "$digest" ] && digest="$(jq -r '.version.digest' < $payload)"
 
 rootfs="$(jq -r '.params.rootfs // false' < $payload)"
 skip_download="$(jq -r '.params.skip_download // false' < $payload)"

cmd/check/main.go

@@ -83,6 +83,8 @@ func main() {
 
 	// If we have a source digest, use it, otherwise, use the tag.
 	if request.Source.Digest != "" {
+		// Override the Version value if any.
+		request.Version.Digest = request.Source.Digest
 		namedref, err = reference.WithDigest(baseNamedRef, digest.Digest(request.Source.Digest))
 		fatalIf("failed to construct digested reference", err)
 	} else {
@@ -121,6 +123,10 @@ func main() {
 		response = append(response, Version{latestDigest})
 	}
 
+	if request.Source.Digest != "" && len(response) == 0 {
+		fatalIf("digest not found", fmt.Errorf("%q", request.Source.Digest))
+	}
+
 	json.NewEncoder(os.Stdout).Encode(response)
 }