Function getPublicKeyOrCert

acceptance/image/image.go:1383–1395

getPublicKeyOrCert returns the cert if we have it, otherwise return public key This mimics the same logic used in Tekton Chains

(signer signature.SignerVerifier)

// getPublicKeyOrCert returns the cert if we have it, otherwise return public key
// This mimics the same logic used in Tekton Chains
func getPublicKeyOrCert(signer signature.SignerVerifier) ([]byte, error) {
	// For now, we'll always use the public key since we're using test keys
	// In a real scenario with certificates, we'd check for cert first
	pub, err := signer.PublicKey()
	if err != nil {
		return nil, fmt.Errorf("getting public key: %w", err)
	}
	pem, err := cryptoutils.MarshalPublicKeyToPEM(pub)
	if err != nil {
		return nil, fmt.Errorf("key to pem: %w", err)
	}
	return pem, nil
}

func applyPatches(statement *in_toto.ProvenanceStatementSLSA02, patches *godog.Table) (*in_toto.ProvenanceStatementSLSA02, error) {
	if statement == nil || patches == nil || len(patches.Rows) == 0 {