add authentication to remote descriptor retrieval in fetchAttestationsForReference

refoo0 · refoo0 · commit 3021f849c9fb · 2026-04-22T15:49:35.000+02:00
Signed-off-by: rafi &lt;refaei.shikho@hotmail.com&gt;
diff --git a/cmd/devguard-scanner/scanner/discover.go b/cmd/devguard-scanner/scanner/discover.go
@@ -21,6 +21,7 @@ import (
 	"encoding/json"
 	"fmt"
 
+	"github.com/google/go-containerregistry/pkg/authn"
 	"github.com/google/go-containerregistry/pkg/name"
 	"github.com/google/go-containerregistry/pkg/v1/remote"
 	"github.com/pkg/errors"
@@ -34,7 +35,7 @@ type AttestationFileLine struct {
 }
 
 func fetchAttestationsForReference(ctx context.Context, ref name.Reference) ([]oci.Signature, error) {
-	desc, err := remote.Get(ref, remote.WithContext(ctx))
+	desc, err := remote.Get(ref, remote.WithContext(ctx), remote.WithAuthFromKeychain(authn.DefaultKeychain))
 	if err != nil {
 		return nil, errors.Wrap(err, "failed to get remote descriptor")
 	}

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,7 @@ import (`
`21`	`21`	`"encoding/json"`
`22`	`22`	`"fmt"`
`23`	`23`
	`24`	`+ "github.com/google/go-containerregistry/pkg/authn"`
`24`	`25`	`"github.com/google/go-containerregistry/pkg/name"`
`25`	`26`	`"github.com/google/go-containerregistry/pkg/v1/remote"`
`26`	`27`	`"github.com/pkg/errors"`
`@@ -34,7 +35,7 @@ type AttestationFileLine struct {`
`34`	`35`	`}`
`35`	`36`
`36`	`37`	`func fetchAttestationsForReference(ctx context.Context, ref name.Reference) ([]oci.Signature, error) {`
`37`		`- desc, err := remote.Get(ref, remote.WithContext(ctx))`
	`38`	`+ desc, err := remote.Get(ref, remote.WithContext(ctx), remote.WithAuthFromKeychain(authn.DefaultKeychain))`
`38`	`39`	`if err != nil {`
`39`	`40`	`return nil, errors.Wrap(err, "failed to get remote descriptor")`
`40`	`41`	`}`