code: func (s *Signer) getMatchingProfile(profile string) (*config.SigningProfile, error) {
  	if profile == "" {
  		return s.policy.Default, nil
  	}
  
  	for p, signingProfile := range s.policy.Profiles {
  		if p == profile {
  			return signingProfile, nil
  		}
  	}
  
  	return nil, cferr.New(cferr.PolicyError, cferr.UnknownProfile)
  }
docs: // getMatchingProfile returns the SigningProfile that matches the profile passed.
  // if an empty profile string is passed it returns the default profile.