in server/signedcontainer/payload.go [117:126]
func unmarshalAndValidate(data []byte) (*payload, error) {
var pl payload
if err := json.Unmarshal(data, &pl); err != nil {
return nil, err
}
if pl.Critical.Type != criticalType {
return nil, fmt.Errorf("unknown critical type for Cosign signature payload: %s", pl.Critical.Type)
}
return &pl, nil
}