mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-18 06:21:35 -06:00
f137da2358
Currently OPA allows users to use unsigned discovery bundles that themselves point to signed service bundles. The discovery plugin checks if the keys in the service bundle do not update those in the boot config. It's possible that the signing config in the discovery object be a nil pointer. This is change adds a check for that. Fixes: #4656 Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>