Function FixSignatureInBundle

pkg/attestation/attestations.go:120–129

FixSignatureInBundle removes any additional base64 encoding from the signature in the bundle. Kept for backward compatibility with attestations stored before the fix for https://github.com/chainloop-dev/chainloop/issues/1832, whose signatures are base64-encoded twice. New bundles produced by BundleF

(bundle *protobundle.Bundle)

// https://github.com/chainloop-dev/chainloop/issues/1832, whose signatures are base64-encoded twice.
// New bundles produced by BundleFromDSSEEnvelope already carry a properly decoded signature.
func FixSignatureInBundle(bundle *protobundle.Bundle) {
	sig := bundle.GetDsseEnvelope().GetSignatures()[0].GetSig()
	dst := make([]byte, base64.StdEncoding.EncodedLen(len(sig)))
	i, err := base64.StdEncoding.Decode(dst, sig)
	if err == nil {
		// it was encoded twice. Use it
		sig = dst[:i]
	}
	bundle.GetDsseEnvelope().GetSignatures()[0].Sig = sig
}