add allowedArchitectures function to filter out unsupported architect…

…ures in manifeslist processing

Signed-off-by: Adam D. Cornett <[email protected]>

cmd/preflight/cmd/check_container.go

@@ -9,6 +9,7 @@ import (
 	"os"
 	"path/filepath"
 	rt "runtime"
+	"slices"
 	"strings"
 
 	"github.com/redhat-openshift-ecosystem/openshift-preflight/artifacts"
@@ -423,7 +424,8 @@ func platformsToBeProcessed(cmd *cobra.Command, cfg *runtime.Config) ([]string,
 		}
 
 		// Preflight was given a manifest list. --platform was not specified.
-		// Therefore, all platforms in the manifest list should be processed.
+		// Therefore, all platforms in the manifest list that we support
+		// for certification ie: {"arm64", "amd64", "ppc64le", "s390x"}, should be processed.
 		// Create a new slice since the original was for a single platform.
 		containerImagePlatforms = make([]string, 0, len(manifest.Manifests))
 		for _, img := range manifest.Manifests {
@@ -435,6 +437,10 @@ func platformsToBeProcessed(cmd *cobra.Command, cfg *runtime.Config) ([]string,
 				// This must be an attestation manifest. Skip it.
 				continue
 			}
+			if !slices.Contains(allowedArchitectures(), img.Platform.Architecture) {
+				// The user has a architecture type in the manifest list that we do not support.
+				continue
+			}
 			containerImagePlatforms = append(containerImagePlatforms, img.Platform.Architecture)
 		}
 		if platformChanged && len(containerImagePlatforms) == 0 {
@@ -444,3 +450,9 @@ func platformsToBeProcessed(cmd *cobra.Command, cfg *runtime.Config) ([]string,
 
 	return containerImagePlatforms, nil
 }
+
+// allowedArchitectures returns a list of container architectures that are supported for certification.
+// Only supported architectures are "arm64", "amd64", "ppc64le", "s390x".
+func allowedArchitectures() []string {
+	return []string{"arm64", "amd64", "ppc64le", "s390x"}
+}

cmd/preflight/cmd/check_container_test.go

@@ -91,7 +91,7 @@ var _ = Describe("Check Container Command", func() {
 		manifestListSrc = fmt.Sprintf("%s/test/cranelist", u.Host)
 		manifests["index"] = manifestListSrc
 
-		platforms := [4]string{"amd64", "arm64", "ppc64le", "s390x"}
+		platforms := [5]string{"amd64", "arm64", "ppc64le", "s390x", "arm"}
 		lst, err := random.Index(1024, 5, int64(len(platforms)+1))
 		Expect(err).ToNot(HaveOccurred())