add comment for co.RootCerts non-nil case

Signed-off-by: Dmitry S <dsavints@gmail.com>
sigstore · Mar 22, 2024 · 1d22f79 · 1d22f79
1 parent 0c0b3bf
commit 1d22f79
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cmd/cosign/cli/verify/verify.go b/cmd/cosign/cli/verify/verify.go
@@ -293,6 +293,7 @@ func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error) {
 				return err
 			}
 		case co.RootCerts != nil:
+			// Verify certificate with root (and if given, intermediate) certificate
 			pubKey, err = cosign.ValidateAndUnpackCert(cert, co)
 			if err != nil {
 				return err