Function wrapCosignErrorMessage

internal/output/output.go:336–349

wrapCosignErrorMessage wraps the message from the given error indicating the type of check that was performed. It may also completely change the message with a more helpful one in some cases.

(err error, checkType string, p policy.Policy)

// type of check that was performed. It may also completely change the  message
// with a more helpful one in some cases.
func wrapCosignErrorMessage(err error, checkType string, p policy.Policy) string {
	// When NOT using the keyless workflow, the "no matching signatures" error from cosign lacks
	// any useful information. Only in such case, change the error message to something more
	// helpful.
	if p == nil || !p.Keyless() {
		switch err.(type) {
		case *cosign.ErrNoMatchingSignatures:
			return fmt.Sprintf(missingSignatureMessage, err)
		case *cosign.ErrNoMatchingAttestations:
			return fmt.Sprintf(missingAttestationMessage, err)
		}
	}
	return fmt.Sprintf("Image %s check failed: %s", checkType, err)
}