verify-blob: add URI to verify-blob output

We should print the URIs mentioned in the certificate, if there are any. Signed-off-by: Christian Rebischke <[email protected]>
sigstore · Nov 13, 2021 · e1d4673 · e1d4673
1 parent cd7e6a8
commit e1d4673
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cmd/cosign/cli/verify/verify_blob.go b/cmd/cosign/cli/verify/verify_blob.go
@@ -174,6 +174,9 @@ func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, certRef, sigRef, blobRe
 		}
 		fmt.Fprintln(os.Stderr, "Certificate is trusted by Fulcio Root CA")
 		fmt.Fprintln(os.Stderr, "Email:", cert.EmailAddresses)
+		for _, uri := range cert.URIs {
+			fmt.Fprintf(os.Stderr, "URI: %s://%s%s\n", uri.Scheme, uri.Host, uri.Path)
+		}
 	}
 	fmt.Fprintln(os.Stderr, "Verified OK")