fix(pipeline): check also checksum length

Signed-off-by: Luca Di Maio <luca.dimaio1@gmail.com>
chainguard-dev · Nov 19, 2024 · bdc79c9 · bdc79c9
1 parent 256eb6c
commit bdc79c9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/build/pipeline.go b/pkg/build/pipeline.go
@@ -145,11 +145,17 @@ func validateWith(data map[string]string, inputs map[string]config.Input) (map[s
 			if !matchValidShaChars(data[k]) {
 				return data, fmt.Errorf("checksum input %q for pipeline contains invalid characters", k)
 			}
+			if len(data[k]) != 64 {
+				return data, fmt.Errorf("checksum input %q for pipeline, invalid length", k)
+			}
 		}
 		if k == "expected-sha512" && data[k] != "" {
 			if !matchValidShaChars(data[k]) {
 				return data, fmt.Errorf("checksum input %q for pipeline contains invalid characters", k)
 			}
+			if len(data[k]) != 128 {
+				return data, fmt.Errorf("checksum input %q for pipeline, invalid length", k)
+			}
 		}
 
 		if v.Required && data[k] == "" {