remove extraneous field from referrers index (#1185)

Signed-off-by: Brian DeHamer <[email protected]>
sigstore · Jun 12, 2024 · 1c918fc · 1c918fc
1 parent 426540e
commit 1c918fc
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/.changeset/plenty-beans-melt.md b/.changeset/plenty-beans-melt.md
@@ -0,0 +1,5 @@
+---
+'@sigstore/oci': patch
+---
+
+Remove extraneous field from referrers index
diff --git a/packages/oci/src/image.ts b/packages/oci/src/image.ts
@@ -102,9 +102,13 @@ export class OCIImage {
 
       // Manually update the referrers list if the referrers API is not supported.
       if (!referrersSupported) {
+        // Strip subjectDigest from the artifact descriptor (in case it was returned)
+        /* eslint-disable-next-line @typescript-eslint/no-unused-vars */
+        const { subjectDigest, ...descriptor } = artifactDescriptor;
+
         await this.#createReferrersIndexByTag({
           artifact: {
-            ...artifactDescriptor,
+            ...descriptor,
             artifactType: opts.mediaType,
             annotations,
           },