From 590d03326940d51ca51cab91069d6d1aa62420b0 Mon Sep 17 00:00:00 2001 From: Billy Lynch Date: Fri, 3 Jan 2025 14:46:30 -0500 Subject: [PATCH] attest: force https for rekor client For some reason this defaults to http, which results in the server terminating the request (my guess is this was previously redirecting http->https before). This changes forces the https scheme (hopefully this isn't disruptive for non-public good instances, but we can revisit other changes later if we need to). --- internal/attest/attest.go | 1 + 1 file changed, 1 insertion(+) diff --git a/internal/attest/attest.go b/internal/attest/attest.go index 90bbd548..cd74b53b 100644 --- a/internal/attest/attest.go +++ b/internal/attest/attest.go @@ -251,6 +251,7 @@ func (a *Attestor) signPayload(ctx context.Context, sha plumbing.Hash, b []byte, tc := &rekorclient.TransportConfig{ Host: rekorHost, BasePath: rekorBasePath, + Schemes: []string{"https"}, } rcfg := rekorclient.NewHTTPClientWithConfig(strfmt.Default, tc)