[1.12.3] Signature verification: fix pull-by-digest

[runcom]

No description provided.

[runcom]

Finally good to go, @rhatdan @mtrmac

[rhatdan]

LGTM, but Lets get @mtrmac review.

[mtrmac]

This is more or less a vendoring of containers/image, right? If so then that should be fine.

There does seem to be some discrepancy between the comments above the tests and the actual tests AFIACT, though. I don’t have a terribly strong opinion on whether that should be resolved by adding tests or removing comments :)

[mtrmac]

I can’t see a test for pulling by tag.

[runcom]

the one above this?

[mtrmac]

So, s/that I can pull by a digest and tag/thaat I can also pull by a digest/?

[mtrmac]

I can’t see a test for pulling by tag.

[runcom]

the first one in this chain

[mtrmac]

AFAICT there is only https://github.com/projectatomic/docker/pull/213/files#diff-8c285cfed55b08d027aed4e479cb9435R736 testing digest use.

[runcom]

@mtrmac fixed

This is more or less a vendoring of containers/image, right? If so then that should be fine.

correct

[runcom]

@rhatdan good to go now!