Fix nil-pointer when ConfigSource is missing (#736)

If enable-provenance-in-status is set to "true" in the Tekton Pipelines configuration, the PipelineRun.Status.Provenance fields is not nil, but the PipelineRun.Status.Provenance.ConfigSource can be nil in some cases. This change ensures a nil-pointer error does not occur in such cases. Signed-off-by: Luiz Carvalho <[email protected]>
tektoncd · Mar 8, 2023 · ad16eb4 · ad16eb4
1 parent 193cc97
commit ad16eb4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/chains/formats/slsa/v1/pipelinerun/pipelinerun.go b/pkg/chains/formats/slsa/v1/pipelinerun/pipelinerun.go
@@ -189,7 +189,7 @@ func metadata(pro *objects.PipelineRunObject) *slsa.ProvenanceMetadata {
 // add any Git specification to materials
 func materials(pro *objects.PipelineRunObject, logger *zap.SugaredLogger) ([]slsa.ProvenanceMaterial, error) {
 	var mats []slsa.ProvenanceMaterial
-	if p := pro.Status.Provenance; p != nil {
+	if p := pro.Status.Provenance; p != nil && p.ConfigSource != nil {
 		m := slsa.ProvenanceMaterial{
 			URI:    p.ConfigSource.URI,
 			Digest: p.ConfigSource.Digest,