attest: force https for rekor client (#610)

For some reason this defaults to http, which results in the server terminating the request (my guess is this was previously redirecting http->https before). This changes forces the https scheme (hopefully this isn't disruptive for non-public good instances, but we can revisit other changes later if we need to). Signed-off-by: Billy Lynch <[email protected]>
sigstore · Jan 3, 2025 · 9fc97de · 9fc97de
1 parent 050c60f
commit 9fc97de
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/internal/attest/attest.go b/internal/attest/attest.go
@@ -251,6 +251,7 @@ func (a *Attestor) signPayload(ctx context.Context, sha plumbing.Hash, b []byte,
 	tc := &rekorclient.TransportConfig{
 		Host:     rekorHost,
 		BasePath: rekorBasePath,
+		Schemes:  []string{"https"},
 	}
 	rcfg := rekorclient.NewHTTPClientWithConfig(strfmt.Default, tc)