Add TODO

Signed-off-by: Cody Soyland <codysoyland@github.com>
github · Mar 12, 2024 · 13972f7 · 13972f7
1 parent 38dbd41
commit 13972f7
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pkg/reconciler/trustroot/trustroot.go b/pkg/reconciler/trustroot/trustroot.go
@@ -235,6 +235,8 @@ func getSigstoreKeysFromTuf(ctx context.Context, tufClient *client.Client) (*con
 		return nil, fmt.Errorf("error getting targets: %w", err)
 	}
 	ret := &config.SigstoreKeys{}
+	// TODO: Use `trusted_root.json` to populate `config.SigstoreKeys`, if
+	// available. Fall back to using target files with custom metadata if not.
 	for name, targetMeta := range targets {
 		// Skip any targets that do not include custom metadata.
 		if targetMeta.Custom == nil {