in cli/verify.go [69:85]
func verifyImageHashStr(img image.Image, keys []sec.PrivEncKey) (string, bool) {
prefix := " hash: "
if img.IsEncrypted() && len(keys) == 0 {
return prefix + "not checked (image encrypted; no keys specified)", true
}
keyIdx, err := img.VerifyHash(keys)
if err != nil {
return prefix + fmt.Sprintf("BAD (%s)", err.Error()), false
}
msg := "good"
if keyIdx != -1 {
msg += fmt.Sprintf(" (%s)", OptEncKeys[keyIdx])
}
return prefix + msg, true
}