diff --git a/go.mod b/go.mod index 0ec7c98..67df3d3 100644 --- a/go.mod +++ b/go.mod @@ -11,7 +11,7 @@ require ( github.com/in-toto/attestation v1.2.0 github.com/policylabs/attestation v0.3.0 github.com/policylabs/collector v0.4.0 - github.com/policylabs/signer v0.6.6 + github.com/policylabs/signer v0.6.7 github.com/sigstore/protobuf-specs v0.5.2 github.com/sigstore/sigstore-go v1.4.0 github.com/sirupsen/logrus v1.10.2 @@ -19,7 +19,7 @@ require ( github.com/stretchr/testify v1.12.1 google.golang.org/protobuf v1.36.12 gopkg.in/yaml.v3 v3.0.1 - sigs.k8s.io/release-sdk v0.13.0 + sigs.k8s.io/release-sdk v0.13.1 sigs.k8s.io/release-utils v0.12.5 ) @@ -185,7 +185,7 @@ require ( github.com/secure-systems-lab/go-securesystemslib v0.11.1 // indirect github.com/sergi/go-diff v1.4.0 // indirect github.com/shibumi/go-pathspec v1.3.0 // indirect - github.com/sigstore/cosign/v3 v3.1.3 // indirect + github.com/sigstore/cosign/v3 v3.1.4 // indirect github.com/sigstore/gitsign v0.17.1 // indirect github.com/sigstore/rekor v1.5.5 // indirect github.com/sigstore/rekor-tiles/v2 v2.4.0 // indirect diff --git a/go.sum b/go.sum index 59492b1..e0f0a9b 100644 --- a/go.sum +++ b/go.sum @@ -157,8 +157,8 @@ github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be/go.mod github.com/coreos/go-oidc/v3 v3.21.0 h1:wZo4Q9Pum8dYEj0eMUPrqR+kvuGkeUplbLpNCkBqoWM= github.com/coreos/go-oidc/v3 v3.21.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4= github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g= -github.com/creack/pty v1.1.19 h1:tUN6H7LWqNx4hQVxomd0CVsDwaDr9gaRQaI4GpSmrsA= -github.com/creack/pty v1.1.19/go.mod h1:MOBLtS5ELjhRRrroQr9kyvTxUAFNvYEK993ew/Vr4O4= +github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s= +github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE= github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q= github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467/go.mod h1:uzvlm1mxhHkdfqitSA92i7Se+S9ksOn3a3qmv/kyOCw= github.com/cyphar/filepath-securejoin v0.6.1 h1:5CeZ1jPXEiYt3+Z6zqprSAgSWiggmpVyciv8syjIpVE= @@ -466,8 +466,8 @@ github.com/policylabs/policy v0.5.7-0.20261004134513-55e5473eef09 h1:xfDq4vrXBDv github.com/policylabs/policy v0.5.7-0.20261004134513-55e5473eef09/go.mod h1:NArOX4b9LMPoc/aa8WPuZkEknGavT3IoYiyJ1rHxUBE= github.com/policylabs/predicates v0.6.0 h1:PgM9/8X8p/i4+Mr+VkijTb2ukeykrHmmjBnk1GuSq+M= github.com/policylabs/predicates v0.6.0/go.mod h1:g3sbkSBMWlEK8CPVFiUzSOfUoHWKLFYHr7xugF77Z60= -github.com/policylabs/signer v0.6.6 h1:NQVrwhSi+Fae5XVVQN9rQ94Z1vu6IiHWac9SK/NjLmo= -github.com/policylabs/signer v0.6.6/go.mod h1:ptQxLBBTfVnxQrRXxYlMFORieLuFjLcTmqSTQqtUrYg= +github.com/policylabs/signer v0.6.7 h1:bzCy4CjhK7AtUuQRKPn1O7XDI2vIGqjjvyhymQTiN/4= +github.com/policylabs/signer v0.6.7/go.mod h1:ptQxLBBTfVnxQrRXxYlMFORieLuFjLcTmqSTQqtUrYg= github.com/protobom/protobom v0.6.2 h1:HJTEEnYyU1m3VWoVj0TkDqArWC3Q2CvSFXHUpCkRkoI= github.com/protobom/protobom v0.6.2/go.mod h1:WtLWrIyJthYwjbNqn4uMWzculpjNrmVYY78FgCRXe7w= github.com/regclient/regclient v0.11.6 h1:IUcd3slMqo1CaLQ3JcE0W039gUv7uYZpY5FsyAYowXA= @@ -489,8 +489,8 @@ github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw= github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= github.com/shibumi/go-pathspec v1.3.0 h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI= github.com/shibumi/go-pathspec v1.3.0/go.mod h1:Xutfslp817l2I1cZvgcfeMQJG5QnU2lh5tVaaMCl3jE= -github.com/sigstore/cosign/v3 v3.1.3 h1:001JQRI/PJ/5T+g/kJ1KTvKFbb322+fomc+pHDZ/6sg= -github.com/sigstore/cosign/v3 v3.1.3/go.mod h1:DmjtYkWDMdbG26X+QSOPB6QQGkLjRjQCIxxNs6wV6bA= +github.com/sigstore/cosign/v3 v3.1.4 h1:d3UHS8oJebMf6XUhPtWv9weU1ZYRyXq9HJ7QPccmqvY= +github.com/sigstore/cosign/v3 v3.1.4/go.mod h1:ZKgAdeS65uMLm3uoY8TiQGdzA8BoKYBSEIo2DEd1/4s= github.com/sigstore/gitsign v0.17.1 h1:36xBG3tFHuJWzAtsm+CCy7zJac5RKr6hBZfGiT2V0Y4= github.com/sigstore/gitsign v0.17.1/go.mod h1:YF2EGXv4hSRX+8Xf/E2B9LhNCWYE4T7LhRZOmcSKXZU= github.com/sigstore/protobuf-specs v0.5.2 h1:RSWWUY8QrVTxbYH00jY/jg2e7YnjzrpwP+PeHTMll0E= @@ -735,8 +735,8 @@ gotest.tools/v3 v3.5.2 h1:7koQfIKdy+I8UTetycgUqXWSDwpgv193Ka+qRsmBY8Q= gotest.tools/v3 v3.5.2/go.mod h1:LtdLGcnqToBH83WByAAi/wiwSFCArdFIUV/xxN4pcjA= k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc= k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0= -sigs.k8s.io/release-sdk v0.13.0 h1:NrkUpEjzL2Pl5Fsfr2FLR0Hr+I9Dp5k7ybbwhYVR1nw= -sigs.k8s.io/release-sdk v0.13.0/go.mod h1:6cRloyYsTPVlU1Aq1VXo/tZ+bcOr8MMT9+ZWu3SsXwA= +sigs.k8s.io/release-sdk v0.13.1 h1:NjKTgAfIxMjES8pYXwsmsEahOvwO2DGJL7cMk40U3iw= +sigs.k8s.io/release-sdk v0.13.1/go.mod h1:0jJt7lmYpU0CDBlH0LMolRSkI+G0RiR+qVrR1DdbCKs= sigs.k8s.io/release-utils v0.12.5 h1:/Ybntn/M7sK+6XjaH88y3pfx3tpJod3WKiItxoS4igg= sigs.k8s.io/release-utils v0.12.5/go.mod h1:rL6dEVB93VNU8Bd3l8tnh98hR9yoqMMn/puxlCU5buw= sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=