Add identity override for rke2

Signed-off-by: Paulo Gomes <[email protected]>

Author: pjbgf

internal/verify/verify.go

@@ -26,6 +26,8 @@ func Verify(imageName string) error {
 		return err
 	}
 
+	fmt.Println("identity:", certIdentity)
+
 	v := &verify.VerifyCommand{
 		CertVerifyOptions: options.CertVerifyOptions{
 			CertIdentity:   certIdentity,
@@ -64,10 +66,18 @@ func certIdentity(imageName string) (string, error) {
 	}
 
 	repo := strings.Join(names[len(names)-2:], "/")
-	ref := d[1]
+	ref := strings.Replace(d[1], "-", "+", 1)
+	repo = overrideRepo(repo)
 
 	indentity := fmt.Sprintf(
 		"https://github.com/%s/.github/workflows/release.yml@refs/tags/%s", repo, ref)
 
 	return indentity, nil
 }
+
+func overrideRepo(repo string) string {
+	if strings.HasPrefix(repo, "rancher/rke2-") {
+		return "rancher/rke2"
+	}
+	return repo
+}

internal/verify/verify_test.go

@@ -16,6 +16,10 @@ func TestCertificateIdentity(t *testing.T) {
 			image: "foo/bar:v0.0.7",
 			want:  "https://github.com/foo/bar/.github/workflows/release.yml@refs/tags/v0.0.7",
 		},
+		{
+			image: "foo/bar:v0.0.7-barfoo2",
+			want:  "https://github.com/foo/bar/.github/workflows/release.yml@refs/tags/v0.0.7+barfoo2",
+		},
 		{
 			image:   "",
 			wantErr: "invalid image name",
@@ -48,6 +52,10 @@ func TestCertificateIdentity(t *testing.T) {
 			image: "tocker.local/bar/foo/bar:v3.14",
 			want:  "https://github.com/foo/bar/.github/workflows/release.yml@refs/tags/v3.14",
 		},
+		{
+			image: "rancher/rke2-bar:v0.0.7",
+			want:  "https://github.com/rancher/rke2/.github/workflows/release.yml@refs/tags/v0.0.7",
+		},
 	}
 
 	for _, tc := range tests {