Try to gracefully handle gitlab jwt

Signed-off-by: John Kjell <[email protected]>
in-toto · Apr 19, 2024 · 5ae979c · 5ae979c
1 parent bb842ee
commit 5ae979c
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/attestation/slsa/slsa.go b/attestation/slsa/slsa.go
@@ -159,7 +159,13 @@ func (p *Provenance) Attest(ctx *attestation.AttestationContext) error {
 			p.PbProvenance.RunDetails.Builder.Id = GLCBuilderId
 			p.PbProvenance.RunDetails.Metadata.InvocationId = gl.Data().PipelineUrl
 			digest := make(map[string]string)
-			digest["sha1"] = gl.Data().JWT.Claims["sha"].(string)
+
+			sha, found := gl.Data().JWT.Claims["sha"]
+			if found {
+				digest["sha1"] = sha.(string)
+			} else {
+				log.Warn("No SHA found in GitLab JWT")
+			}
 
 		// Material Attestors
 		case material.Name: