Diff of the two buildlogs: -- --- b1/build.log 2025-10-23 12:18:11.058295160 +0000 +++ b2/build.log 2025-10-23 12:23:26.834715336 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Wed Nov 25 06:27:02 -12 2026 -I: pbuilder-time-stamp: 1795631222 +I: Current time: Fri Oct 24 02:18:12 +14 2025 +I: pbuilder-time-stamp: 1761221892 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/forky-reproducible-base.tgz] I: copying local configuration @@ -24,53 +24,85 @@ dpkg-source: info: applying 0001-Don-t-hard-fail-on-slow-systems.-624.patch I: using fakeroot in build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/2292162/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/D01_modify_environment starting +debug: Running on ionos11-amd64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Oct 23 12:18 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='amd64' - DEBIAN_FRONTEND='noninteractive' - DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 ' - DISTRIBUTION='forky' - HOME='/root' - HOST_ARCH='amd64' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="3" [2]="3" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu") + BASH_VERSION='5.3.3(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=amd64 + DEBIAN_FRONTEND=noninteractive + DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=40 ' + DIRSTACK=() + DISTRIBUTION=forky + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=x86_64 + HOST_ARCH=amd64 IFS=' ' - INVOCATION_ID='185bc8cccf014c9985f1f26d68b6a634' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='2292162' - PS1='# ' - PS2='> ' + INVOCATION_ID=6c09e661f3ed496b91a8819ada426dba + LANG=C + LANGUAGE=et_EE:et + LC_ALL=C + MACHTYPE=x86_64-pc-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=1109612 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.D7tQYA0k/pbuilderrc_2LYb --distribution forky --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.D7tQYA0k/b1 --logfile b1/build.log gitsign_0.13.0-3.dsc' - SUDO_GID='110' - SUDO_HOME='/var/lib/jenkins' - SUDO_UID='105' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://213.165.73.152:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.D7tQYA0k/pbuilderrc_Gu36 --distribution forky --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.D7tQYA0k/b2 --logfile b2/build.log gitsign_0.13.0-3.dsc' + SUDO_GID=111 + SUDO_HOME=/var/lib/jenkins + SUDO_UID=106 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://46.16.76.132:3128 I: uname -a - Linux ionos5-amd64 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux + Linux i-capture-the-hostname 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Aug 10 2025 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/2292162/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Aug 10 12:30 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -726,7 +758,7 @@ Get: 590 http://deb.debian.org/debian forky/main amd64 golang-gitlab-gitlab-org-api-client-go-dev all 0.123.0-2 [286 kB] Get: 591 http://deb.debian.org/debian forky/main amd64 golang-github-sigstore-cosign-dev all 2.5.0-2 [325 kB] Get: 592 http://deb.debian.org/debian forky/main amd64 help2man amd64 1.49.3 [198 kB] -Fetched 268 MB in 14s (19.8 MB/s) +Fetched 268 MB in 17s (15.6 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19898 files and directories currently installed.) @@ -2622,8 +2654,8 @@ Setting up tzdata (2025b-5) ... Current default time zone: 'Etc/UTC' -Local time is now: Wed Nov 25 18:34:05 UTC 2026. -Universal Time is now: Wed Nov 25 18:34:05 UTC 2026. +Local time is now: Thu Oct 23 12:21:11 UTC 2025. +Universal Time is now: Thu Oct 23 12:21:11 UTC 2025. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ... @@ -3127,7 +3159,11 @@ fakeroot is already the newest version (1.37.1.2-1). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. I: Building the package -I: Running cd /build/reproducible-path/gitsign-0.13.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../gitsign_0.13.0-3_source.changes +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for forky +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/gitsign-0.13.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../gitsign_0.13.0-3_source.changes dpkg-buildpackage: info: source package gitsign dpkg-buildpackage: info: source version 0.13.0-3 dpkg-buildpackage: info: source distribution unstable @@ -3145,344 +3181,323 @@ dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang dh_auto_build -O--builddirectory=_build -O--buildsystem=golang - cd _build && go install -trimpath -v -p 42 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version -log/internal -image/color + cd _build && go install -trimpath -v -p 40 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version +internal/byteorder math/bits +unicode/utf8 unicode/utf16 -github.com/go-git/go-git/plumbing/color -cmp -github.com/pjbgf/sha1cd/internal -go.opencensus.io -github.com/pjbgf/sha1cd/ubc -container/list -internal/goarch +internal/asan +vendor/golang.org/x/crypto/internal/alias internal/unsafeheader -internal/godebugs -internal/goos +internal/coverage/rtcov +github.com/pjbgf/sha1cd/ubc +internal/msan +internal/itoa +image/color internal/profilerecord +google.golang.org/grpc/serviceconfig +cmp +golang.org/x/crypto/internal/alias +container/list github.com/ProtonMail/go-crypto/internal/byteutil -internal/coverage/rtcov -encoding +vendor/golang.org/x/crypto/cryptobyte/asn1 +unicode +log/internal +crypto/internal/boring/sig +go.opencensus.io +golang.org/x/crypto/cryptobyte/asn1 +internal/runtime/atomic +google.golang.org/protobuf/internal/flags +go.opencensus.io/internal/tagencoding +internal/godebugs go.opencensus.io/trace/internal -internal/byteorder -vendor/golang.org/x/crypto/internal/alias -internal/cpu +internal/goexperiment +github.com/pjbgf/sha1cd/internal +github.com/aws/aws-sdk-go-v2/internal/sdkio +github.com/awslabs/amazon-ecr-credential-helper/ecr-login/version +github.com/go-git/go-git/plumbing/color +sync/atomic github.com/docker/cli/cli/config/types github.com/google/go-containerregistry/pkg/v1/types -crypto/internal/boring/sig github.com/klauspost/compress/internal/cpuinfo -github.com/google/go-containerregistry/pkg/compression -github.com/klauspost/compress/internal/le -github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common -github.com/awslabs/amazon-ecr-credential-helper/ecr-login/version -google.golang.org/grpc/serviceconfig -unicode -github.com/aws/aws-sdk-go-v2/internal/sdkio -unicode/utf8 -internal/msan -internal/nettrace crypto/internal/fips140/alias -vendor/golang.org/x/crypto/cryptobyte/asn1 -google.golang.org/protobuf/internal/flags +internal/goarch +internal/cpu +github.com/klauspost/compress/internal/le +internal/goos +encoding internal/runtime/syscall -golang.org/x/crypto/internal/alias -internal/asan -go.opencensus.io/internal/tagencoding -sync/atomic +github.com/google/go-containerregistry/pkg/compression +internal/nettrace +github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common +go.mongodb.org/mongo-driver/bson/bsonoptions go.mongodb.org/mongo-driver/bson/bsontype github.com/go-openapi/swag/cmdutils github.com/sigstore/rekor/pkg/pki/identity -go.mongodb.org/mongo-driver/bson/bsonoptions github.com/sigstore/cosign/pkg/types github.com/spf13/viper/internal/features -internal/goexperiment -internal/runtime/atomic log/slog/internal go.opentelemetry.io/otel/metric/embedded -internal/runtime/math -internal/abi -golang.org/x/crypto/cryptobyte/asn1 -internal/runtime/sys -internal/itoa -github.com/golang/groupcache/lru -internal/chacha8rand crypto/internal/fips140deps/byteorder go.opentelemetry.io/otel/trace/embedded github.com/transparency-dev/merkle github.com/theupdateframework/go-tuf/v0/internal/sets k8s.io/apimachinery/pkg/selection -k8s.io/apimachinery/pkg/types github.com/google/go-cmp/cmp/internal/flags github.com/tink-crypto/tink-go/insecuresecretdataaccess -google.golang.org/protobuf/internal/set -github.com/tink-crypto/tink-go/internal github.com/tink-crypto/tink-go/internal/internalapi +github.com/tink-crypto/tink-go/internal +internal/runtime/math +internal/chacha8rand github.com/tink-crypto/tink-go/key -golang.org/x/crypto/salsa20/salsa github.com/tink-crypto/tink-go/monitoring github.com/aws/aws-sdk-go/aws/client/metadata +internal/runtime/sys +internal/abi +k8s.io/apimachinery/pkg/types github.com/googleapis/gax-go/v2/internal -crypto/internal/fips140/subtle github.com/pelletier/go-toml/v2/internal/characters +crypto/internal/fips140/subtle +github.com/golang/groupcache/lru +google.golang.org/protobuf/internal/set +golang.org/x/crypto/salsa20/salsa crypto/internal/fips140deps/cpu internal/bytealg -math internal/runtime/exithook +math internal/stringslite internal/race internal/sync internal/runtime/maps +github.com/klauspost/compress github.com/aws/aws-sdk-go/internal/sdkmath go.opentelemetry.io/otel/internal -github.com/klauspost/compress runtime +k8s.io/klog/internal/dbg internal/reflectlite -sync crypto/subtle -weak iter -k8s.io/klog/internal/dbg -slices +weak +sync maps +slices golang.org/x/exp/slices -errors -sort -strconv -internal/oserror -path -math/rand/v2 -vendor/golang.org/x/net/dns/dnsmessage -golang.org/x/crypto/cast5 -github.com/sassoftware/relic/signers/sigerrors -github.com/go-viper/mapstructure/v2/internal/errors -io -internal/bisect -syscall internal/testlog -internal/singleflight unique +github.com/sagikazarmark/locafero/internal/queue google.golang.org/protobuf/internal/pragma -google.golang.org/grpc/internal/buffer go.uber.org/zap/internal/pool -github.com/sagikazarmark/locafero/internal/queue +internal/singleflight +github.com/sigstore/cosign/cmd/cosign/cli/sign/privacy log/slog/internal/buffer github.com/aws/aws-sdk-go/internal/sync/singleflight -github.com/sigstore/cosign/cmd/cosign/cli/sign/privacy +internal/bisect runtime/cgo -bytes +internal/godebug +errors +sort +internal/oserror +path +google.golang.org/grpc/internal/buffer +github.com/sassoftware/relic/signers/sigerrors +math/rand +crypto/internal/fips140deps/godebug +golang.org/x/crypto/cast5 +vendor/golang.org/x/net/dns/dnsmessage +math/rand/v2 +io +strconv +github.com/go-viper/mapstructure/v2/internal/errors +syscall +crypto/internal/randutil hash internal/saferio -strings +github.com/aws/smithy-go/transport/http/internal/io github.com/google/go-containerregistry/internal/and +bytes +github.com/aws/aws-sdk-go/internal/sdkio go.step.sm/crypto/internal/utils/utfbom -github.com/gogo/protobuf/sortkeys +container/heap +golang.org/x/mod/semver github.com/cloudflare/circl/internal/sha3 +strings +github.com/gogo/protobuf/sortkeys k8s.io/apimachinery/pkg/util/sets -github.com/aws/smithy-go/transport/http/internal/io -golang.org/x/mod/semver -github.com/aws/aws-sdk-go/internal/sdkio -container/heap -github.com/x448/float16 -golang.org/x/text/transform -hash/crc32 -reflect -internal/godebug -hash/fnv hash/adler32 -golang.org/x/crypto/blowfish +hash/fnv +hash/crc32 crypto -vendor/golang.org/x/text/transform -net/netip golang.org/x/crypto/openpgp/errors -crypto/internal/randutil +net/netip encoding/base32 +github.com/x448/float16 +golang.org/x/crypto/blowfish +reflect github.com/cloudflare/circl/sign golang.org/x/crypto/openpgp/s2k +vendor/golang.org/x/text/transform github.com/syndtr/goleveldb/leveldb/comparer github.com/aws/smithy-go/io -golang.org/x/text/runes +golang.org/x/text/transform +net/http/internal/ascii bufio -github.com/go-openapi/swag/conv +crypto/internal/impl +github.com/aws/aws-sdk-go-v2/internal/strings regexp/syntax html +github.com/go-openapi/swag/stringutils +github.com/go-openapi/swag/conv github.com/theupdateframework/go-tuf/v0/internal/roles net/http/internal/testcert -k8s.io/klog/internal/severity -github.com/go-openapi/swag/mangling -go/build/constraint -crypto/internal/impl github.com/munnerz/goautoneg -github.com/aws/aws-sdk-go/internal/strings -net/http/internal/ascii +crypto/internal/fips140 +github.com/go-openapi/swag/mangling github.com/aws/aws-sdk-go/internal/sdkuri +go/build/constraint go.step.sm/crypto/internal/emoji -github.com/go-openapi/swag/stringutils -github.com/aws/aws-sdk-go-v2/internal/strings -crypto/internal/fips140deps/godebug -math/rand -crypto/internal/fips140 -compress/bzip2 -image +k8s.io/klog/internal/severity +github.com/aws/aws-sdk-go/internal/strings +golang.org/x/text/runes crypto/internal/fips140/sha256 +crypto/tls/internal/fips140tls crypto/internal/fips140/sha3 crypto/internal/fips140/sha512 -crypto/tls/internal/fips140tls -regexp -internal/syscall/execenv -internal/syscall/unix -time -crypto/sha3 +compress/bzip2 +image crypto/internal/fips140/hmac -image/internal/imageutil -k8s.io/apimachinery/pkg/api/operation -image/jpeg +crypto/sha3 crypto/internal/fips140/check crypto/internal/fips140hash -crypto/internal/fips140/aes -crypto/internal/fips140/edwards25519/field -crypto/internal/fips140/nistec/fiat -crypto/internal/fips140/hkdf +internal/syscall/execenv +internal/syscall/unix +time +crypto/fips140 crypto/internal/fips140/tls12 +crypto/internal/fips140/hkdf crypto/internal/fips140/bigmod -crypto/fips140 +crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/aes +crypto/internal/fips140/nistec/fiat +k8s.io/apimachinery/pkg/api/operation crypto/internal/fips140/tls13 +image/internal/imageutil +regexp crypto/internal/fips140/edwards25519 +image/jpeg github.com/go-git/go-git/internal/url k8s.io/apimachinery/pkg/version google.golang.org/api/internal/third_party/uritemplates -internal/poll -context +crypto/internal/fips140/nistec google.golang.org/grpc/backoff google.golang.org/grpc/keepalive github.com/aws/aws-sdk-go-v2/internal/timeconv +github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 +context github.com/aws/smithy-go/ptr -github.com/sigstore/gitsign/pkg/predicate -github.com/google/go-containerregistry/internal/retry/wait github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2 -github.com/aws/aws-sdk-go/internal/sdkrand -io/fs -github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1 -k8s.io/klog/internal/clock +github.com/google/go-containerregistry/internal/retry/wait k8s.io/utils/clock +k8s.io/klog/internal/clock go.uber.org/zap/buffer -github.com/google/go-cmp/cmp/internal/diff github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/common +github.com/google/go-cmp/cmp/internal/diff github.com/jonboulle/clockwork +github.com/sigstore/gitsign/pkg/predicate +github.com/aws/aws-sdk-go/internal/sdkrand +io/fs +internal/poll go.uber.org/zap/internal/bufferpool +internal/fmtsort +go.opentelemetry.io/otel/internal/attribute +github.com/go-openapi/swag/jsonname +github.com/go-openapi/swag/typeutils +sigs.k8s.io/structured-merge-diff/schema +github.com/google/go-cmp/cmp/internal/function +encoding/binary +github.com/modern-go/reflect2 go.uber.org/zap/internal/stacktrace +internal/filepathlite +embed +github.com/spf13/afero/internal/common google.golang.org/grpc/internal/backoff github.com/aws/smithy-go/context github.com/aws/aws-sdk-go-v2/internal/sdk +golang.org/x/net/context go.opentelemetry.io/otel/internal/baggage github.com/tink-crypto/tink-go/tink google.golang.org/grpc/internal/grpcsync -golang.org/x/net/context -internal/filepathlite -embed -github.com/spf13/afero/internal/common github.com/jbenet/go-context/io google.golang.org/protobuf/internal/editiondefaults github.com/go-git/go-git/utils/ioutil -crypto/internal/fips140/nistec os -internal/fmtsort -github.com/go-openapi/swag/typeutils -go.opentelemetry.io/otel/internal/attribute -github.com/modern-go/reflect2 -github.com/go-openapi/swag/jsonname -github.com/google/go-cmp/cmp/internal/function -encoding/binary -sigs.k8s.io/structured-merge-diff/schema encoding/base64 -vendor/golang.org/x/crypto/internal/poly1305 golang.org/x/crypto/internal/poly1305 +vendor/golang.org/x/crypto/internal/poly1305 github.com/cespare/xxhash -github.com/klauspost/compress/internal/snapref -golang.org/x/sys/unix -github.com/golang/snappy -sigs.k8s.io/randfill/bytesource github.com/google/gofuzz/bytesource github.com/tink-crypto/tink-go/internal/outputprefix +sigs.k8s.io/randfill/bytesource +github.com/klauspost/compress/internal/snapref +github.com/golang/snappy filippo.io/edwards25519/field +golang.org/x/sys/unix +encoding/pem +golang.org/x/crypto/openpgp/armor +golang.org/x/crypto/nacl/secretbox +filippo.io/edwards25519 crypto/internal/sysrand -vendor/golang.org/x/sys/cpu -path/filepath io/ioutil -fmt google.golang.org/protobuf/internal/detrand github.com/go-git/go-billy/v5 -golang.org/x/sys/cpu -internal/sysinfo +google.golang.org/grpc/internal/envconfig go.uber.org/zap/internal/exit -k8s.io/klog/internal/buffer internal/lazyregexp +internal/sysinfo +k8s.io/klog/internal/buffer +path/filepath +vendor/golang.org/x/sys/cpu os/signal -google.golang.org/grpc/internal/envconfig -golang.org/x/crypto/nacl/secretbox -encoding/pem -golang.org/x/crypto/openpgp/armor +fmt +golang.org/x/sys/cpu +net crypto/internal/entropy -filippo.io/edwards25519 crypto/internal/fips140/drbg -crypto/internal/fips140/aes/gcm +golang.org/x/crypto/blake2b +golang.org/x/crypto/sha3 crypto/internal/fips140only +crypto/internal/fips140/ecdh crypto/internal/fips140/ed25519 +crypto/internal/fips140/ecdsa crypto/internal/fips140/mlkem +crypto/internal/fips140/aes/gcm crypto/internal/fips140/rsa -golang.org/x/crypto/sha3 -golang.org/x/crypto/blake2b -crypto/internal/fips140/ecdh -net -crypto/internal/fips140/ecdsa +github.com/go-git/go-billy/v5/helper/polyfill github.com/go-git/go-billy/v5/util +github.com/shibumi/go-pathspec +k8s.io/client-go/util/homedir github.com/spf13/afero/mem os/exec -github.com/go-git/go-billy/v5/helper/polyfill -k8s.io/client-go/util/homedir -github.com/shibumi/go-pathspec +crypto/rc4 +crypto/md5 golang.org/x/crypto/argon2 github.com/go-git/go-billy/v5/helper/chroot crypto/cipher -crypto/md5 -crypto/rc4 crypto/mlkem -crypto/des -crypto/internal/boring -vendor/golang.org/x/crypto/chacha20 -github.com/ProtonMail/go-crypto/eax -golang.org/x/crypto/chacha20 -crypto/aes -crypto/sha1 -crypto/ecdh -crypto/sha512 -crypto/hmac -crypto/sha256 -github.com/ProtonMail/go-crypto/openpgp/aes/keywrap -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf -github.com/transparency-dev/merkle/rfc6962 -go.step.sm/crypto/internal/bcrypt_pbkdf -golang.org/x/crypto/pbkdf2 -golang.org/x/crypto/hkdf -github.com/mitchellh/go-homedir -github.com/skratchdot/open-golang/open -golang.org/x/crypto/scrypt -vendor/golang.org/x/crypto/chacha20poly1305 -github.com/sigstore/cosign/pkg/providers github.com/sigstore/cosign/pkg/cosign/env -encoding/json -compress/flate +github.com/sigstore/cosign/pkg/providers encoding/hex log +encoding/json net/url -vendor/golang.org/x/text/unicode/norm -mime +compress/flate vendor/golang.org/x/net/http2/hpack -math/big +mime mime/quotedprintable net/http/internal +math/big os/user +vendor/golang.org/x/text/unicode/norm text/template/parse text/tabwriter google.golang.org/grpc/attributes @@ -3490,1073 +3505,1094 @@ go/token google.golang.org/protobuf/internal/version google.golang.org/grpc/internal/idle -golang.org/x/text/unicode/norm -golang.org/x/net/http2/hpack +go.opencensus.io/internal go.opencensus.io/trace/tracestate -runtime/trace go.opencensus.io/resource -go.opencensus.io/internal -github.com/go-jose/go-jose/json +runtime/trace dario.cat/mergo -github.com/ProtonMail/go-crypto/openpgp/errors -github.com/pjbgf/sha1cd -github.com/go-git/go-git/utils/merkletrie/noder -encoding/gob gopkg.in/warnings.v0 -github.com/src-d/gcfg/types +github.com/go-jose/go-jose/json +github.com/go-git/go-git/internal/revision +github.com/ProtonMail/go-crypto/openpgp/errors github.com/go-git/go-git/plumbing/filemode -google.golang.org/protobuf/encoding/protowire +golang.org/x/net/http2/hpack +github.com/src-d/gcfg/types github.com/src-d/gcfg/token -github.com/go-git/go-git/internal/revision +encoding/gob +golang.org/x/text/unicode/norm +github.com/pjbgf/sha1cd +github.com/emirpasic/gods/utils +github.com/go-git/go-git/utils/merkletrie/noder github.com/go-git/go-git/plumbing/protocol/packp/capability golang.org/x/sys/execabs -github.com/sigstore/cosign/pkg/providers/envvar -github.com/emirpasic/gods/utils -github.com/sigstore/cosign/pkg/providers/filesystem runtime/debug -golang.org/x/crypto/curve25519 -github.com/ProtonMail/go-crypto/ocb +google.golang.org/protobuf/encoding/protowire github.com/aws/smithy-go github.com/aws/aws-sdk-go-v2/aws/ratelimit +github.com/sigstore/cosign/pkg/providers/envvar +github.com/sigstore/cosign/pkg/providers/filesystem github.com/aws/aws-sdk-go-v2/feature/ec2/imds/internal/config github.com/aws/smithy-go/encoding +go.opencensus.io/metric/metricdata encoding/xml +crypto/internal/boring +crypto/des +vendor/golang.org/x/crypto/chacha20 +github.com/ProtonMail/go-crypto/openpgp/armor +github.com/ProtonMail/go-crypto/eax +github.com/ProtonMail/go-crypto/ocb +github.com/emirpasic/gods/containers github.com/go-git/go-git/utils/merkletrie/internal/frame +golang.org/x/crypto/chacha20 +go.opencensus.io/metric/metricproducer +github.com/mitchellh/go-homedir github.com/pkg/errors github.com/aws/aws-sdk-go-v2/internal/ini -go.opencensus.io/metric/metricdata -github.com/ProtonMail/go-crypto/openpgp/armor -github.com/emirpasic/gods/containers github.com/opencontainers/go-digest +crypto/aes +crypto/ecdh +crypto/sha512 +vendor/golang.org/x/text/unicode/bidi +crypto/hmac +crypto/sha1 +crypto/sha256 +golang.org/x/net/internal/timeseries +google.golang.org/protobuf/reflect/protoreflect +golang.org/x/text/unicode/bidi +github.com/spiffe/go-spiffe/logger +github.com/ProtonMail/go-crypto/openpgp/aes/keywrap +github.com/src-d/gcfg/scanner +github.com/emirpasic/gods/lists +github.com/emirpasic/gods/trees +github.com/go-git/go-git/plumbing/hash +github.com/go-git/go-git/utils/merkletrie +github.com/go-git/go-git/utils/trace +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +golang.org/x/crypto/pbkdf2 +golang.org/x/crypto/hkdf +github.com/aws/smithy-go/logging +github.com/ProtonMail/go-crypto/openpgp/internal/algorithm +github.com/google/go-containerregistry/pkg/logs +github.com/aws/smithy-go/auth github.com/google/go-containerregistry/internal/retry +github.com/aws/aws-sdk-go-v2/internal/sync/singleflight +github.com/aws/smithy-go/internal/sync/singleflight github.com/klauspost/compress/fse github.com/opencontainers/image-spec/specs-go github.com/containerd/stargz-snapshotter/estargz/errorutil +github.com/go-git/go-git/plumbing golang.org/x/sync/errgroup -google.golang.org/protobuf/reflect/protoreflect +vendor/golang.org/x/crypto/chacha20poly1305 +github.com/aws/smithy-go/middleware flag -github.com/ProtonMail/go-crypto/openpgp/internal/algorithm -github.com/go-git/go-git/plumbing/hash -github.com/aws/smithy-go/auth encoding/csv database/sql/driver -github.com/go-git/go-git/utils/merkletrie -github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer +github.com/go-openapi/analysis/internal/debug go.yaml.in/yaml/v3 -github.com/emirpasic/gods/lists -github.com/emirpasic/gods/trees -go.uber.org/zap/internal/color -go.opencensus.io/metric/metricproducer -golang.org/x/net/internal/timeseries -vendor/golang.org/x/text/unicode/bidi -github.com/spiffe/go-spiffe/logger -github.com/src-d/gcfg/scanner -github.com/go-git/go-git/utils/trace -golang.org/x/text/unicode/bidi -github.com/aws/aws-sdk-go-v2/internal/sync/singleflight -github.com/aws/smithy-go/internal/sync/singleflight -github.com/aws/smithy-go/logging -github.com/google/go-containerregistry/pkg/logs +github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer github.com/opencontainers/image-spec/specs-go/v1 github.com/spiffe/go-spiffe/spiffeid -github.com/klauspost/compress/huff0 github.com/sergi/go-diff/diffmatchpatch +github.com/go-git/go-git/plumbing/format/pktline github.com/google/go-containerregistry/internal/redact -github.com/go-git/go-git/plumbing -github.com/go-openapi/analysis/internal/debug github.com/go-openapi/jsonreference/internal +go.uber.org/zap/internal/color +golang.org/x/crypto/scrypt +github.com/ProtonMail/go-crypto/openpgp/s2k github.com/nozzle/throttler github.com/sigstore/cosign/internal/pkg/oci/remote github.com/sigstore/cosign/internal/ui github.com/sigstore/sigstore-go/pkg/util -compress/gzip -compress/zlib -github.com/aws/smithy-go/middleware github.com/spf13/cast/internal github.com/subosito/gotenv github.com/pelletier/go-toml/v2/internal/danger +compress/gzip +compress/zlib github.com/go-openapi/runtime/logger -github.com/ProtonMail/go-crypto/openpgp/s2k -gopkg.in/yaml.v3 -github.com/go-git/go-git/plumbing/format/pktline github.com/opentracing/opentracing-go/log +gopkg.in/yaml.v3 go.opentelemetry.io/otel/baggage github.com/transparency-dev/merkle/compact +github.com/go-git/go-git/plumbing/protocol/packp/sideband +github.com/transparency-dev/merkle/rfc6962 github.com/sigstore/cosign/internal/pkg/now github.com/theupdateframework/go-tuf/v0/internal/fsutil -github.com/syndtr/goleveldb/leveldb/util +github.com/go-git/go-git/plumbing/cache +github.com/go-git/go-git/utils/binary +github.com/go-git/go-git/plumbing/format/diff +golang.org/x/crypto/curve25519 +github.com/go-git/go-git/utils/merkletrie/filesystem github.com/pelletier/go-toml/v2/unstable +github.com/transparency-dev/merkle/proof github.com/go-git/go-git/utils/sync +runtime/pprof +github.com/google/go-containerregistry/internal/gzip +internal/profile +github.com/syndtr/goleveldb/leveldb/util github.com/syndtr/goleveldb/leveldb/storage +github.com/go-git/go-git/plumbing/format/idxfile +github.com/go-git/go-git/plumbing/format/index github.com/google/go-querystring/query golang.org/x/time/rate k8s.io/apimachinery/third_party/forked/golang/reflect -runtime/pprof -github.com/go-git/go-git/plumbing/protocol/packp/sideband -github.com/google/go-containerregistry/internal/gzip -internal/profile -github.com/oklog/ulid k8s.io/apimachinery/pkg/fields +github.com/klauspost/compress/huff0 k8s.io/apimachinery/pkg/util/errors -github.com/syndtr/goleveldb/leveldb/cache -github.com/syndtr/goleveldb/leveldb/filter go/scanner -github.com/transparency-dev/merkle/proof +golang.org/x/text/secure/bidirule go/doc/comment k8s.io/apimachinery/pkg/conversion/queryparams +github.com/oklog/ulid k8s.io/apimachinery/pkg/util/naming +vendor/golang.org/x/text/secure/bidirule +github.com/syndtr/goleveldb/leveldb/cache github.com/modern-go/concurrent -sigs.k8s.io/yaml/goyaml.v2 +github.com/syndtr/goleveldb/leveldb/filter sigs.k8s.io/randfill +sigs.k8s.io/yaml/goyaml.v2 k8s.io/utils/ptr -github.com/go-git/go-git/plumbing/cache -github.com/go-git/go-git/utils/binary -github.com/go-git/go-git/plumbing/format/diff -github.com/go-git/go-git/utils/merkletrie/filesystem k8s.io/apimachinery/pkg/util/version -k8s.io/apimachinery/pkg/util/validation/field -k8s.io/client-go/pkg/version k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json +k8s.io/client-go/pkg/version github.com/davecgh/go-spew/spew +k8s.io/apimachinery/pkg/util/validation/field +github.com/go-git/go-git/utils/diff k8s.io/client-go/tools/metrics k8s.io/client-go/util/flowcontrol -github.com/go-git/go-git/plumbing/format/index -github.com/go-git/go-git/plumbing/format/idxfile -testing k8s.io/kube-openapi/pkg/cached -github.com/syndtr/goleveldb/leveldb/opt -text/template -github.com/go-git/go-git/utils/diff -go/ast -k8s.io/apimachinery/pkg/conversion -github.com/pelletier/go-toml/v2/internal/tracker +github.com/go-git/go-git/plumbing/storer +github.com/go-git/go-git/utils/merkletrie/index +testing github.com/emicklei/go-restful/log +text/template github.com/google/gofuzz +github.com/syndtr/goleveldb/leveldb/opt k8s.io/apimachinery/third_party/forked/golang/json github.com/google/go-cmp/cmp/internal/value -golang.org/x/text/secure/bidirule -github.com/aws/aws-sdk-go-v2/internal/context -gopkg.in/square/go-jose.v2/json +go/ast +github.com/pelletier/go-toml/v2/internal/tracker github.com/common-nighthawk/go-figure +gopkg.in/square/go-jose.v2/json +github.com/skratchdot/open-golang/open +k8s.io/apimachinery/pkg/conversion github.com/go-jose/go-jose/v3/json +vendor/golang.org/x/net/idna github.com/sigstore/gitsign/internal/config +github.com/go-git/go-git/plumbing/format/packfile github.com/google/trillian/types/internal/tls +github.com/aws/aws-sdk-go-v2/internal/context +golang.org/x/term +github.com/cyphar/filepath-securejoin +golang.org/x/net/idna +github.com/fsnotify/fsnotify/internal golang.org/x/sync/singleflight -github.com/googleapis/gax-go/v2/callctx -github.com/aws/aws-sdk-go-v2/internal/middleware github.com/aws/aws-sdk-go/aws/awserr +github.com/aws/aws-sdk-go-v2/internal/middleware +google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/genid +google.golang.org/protobuf/internal/order +google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/runtime/protoiface +google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts +github.com/syndtr/goleveldb/leveldb/errors +github.com/google/go-cmp/cmp +github.com/jellydator/ttlcache +google.golang.org/protobuf/internal/protolazy +google.golang.org/protobuf/reflect/protoregistry +github.com/googleapis/gax-go/v2/callctx +go.step.sm/crypto/internal/bcrypt_pbkdf go.step.sm/crypto/internal/utils +google.golang.org/protobuf/internal/encoding/json +google.golang.org/protobuf/internal/encoding/text +github.com/syndtr/goleveldb/leveldb/iterator +github.com/syndtr/goleveldb/leveldb/journal +github.com/aws/aws-sdk-go/internal/ini +github.com/fsnotify/fsnotify go.step.sm/crypto/fingerprint github.com/sigstore/gitsign/pkg/version +github.com/sigstore/gitsign/internal/cache/api +github.com/mattn/go-tty github.com/russross/blackfriday/v2 -github.com/go-git/go-git/plumbing/storer -github.com/go-git/go-git/utils/merkletrie/index -vendor/golang.org/x/text/secure/bidirule -github.com/jellydator/ttlcache -golang.org/x/net/idna +k8s.io/apimachinery/pkg/util/dump +github.com/aws/aws-sdk-go-v2/aws/protocol/xml +github.com/syndtr/goleveldb/leveldb/memdb +github.com/syndtr/goleveldb/leveldb/table +github.com/sigstore/gitsign/internal/io google.golang.org/grpc/grpclog/internal -github.com/emirpasic/gods/lists/arraylist github.com/aws/aws-sdk-go-v2/aws/middleware/private/metrics -github.com/aws/aws-sdk-go-v2/aws/protocol/restjson +github.com/emirpasic/gods/lists/arraylist github.com/jmespath/go-jmespath github.com/docker/docker-credential-helpers/credentials -github.com/google/go-containerregistry/pkg/v1 github.com/secure-systems-lab/go-securesystemslib/cjson +github.com/aws/aws-sdk-go-v2/aws/protocol/restjson +github.com/google/go-containerregistry/pkg/v1 +github.com/sirupsen/logrus github.com/go-openapi/swag/jsonutils/adapters/ifaces github.com/blang/semver go.uber.org/atomic +github.com/go-git/go-billy/v5/osfs github.com/spf13/viper/internal/encoding/json github.com/pelletier/go-toml/v2 log/slog go.opentelemetry.io/otel/attribute go.opentelemetry.io/otel/codes -github.com/gogo/protobuf/proto -sigs.k8s.io/json/internal/golang/encoding/json -google.golang.org/grpc/grpclog +google.golang.org/protobuf/internal/encoding/defval +go.opencensus.io/tag github.com/go-openapi/swag/jsonutils/adapters/stdlib/json -github.com/docker/docker-credential-helpers/client -github.com/syndtr/goleveldb/leveldb/errors -github.com/theupdateframework/go-tuf/v0/data -google.golang.org/protobuf/internal/encoding/messageset -google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/internal/order -google.golang.org/protobuf/internal/strs -google.golang.org/protobuf/runtime/protoiface -google.golang.org/protobuf/internal/descfmt -google.golang.org/protobuf/internal/descopts -vendor/golang.org/x/net/idna -github.com/go-git/go-git/plumbing/format/packfile +github.com/gogo/protobuf/proto github.com/emirpasic/gods/trees/binaryheap -github.com/aws/aws-sdk-go-v2/aws/protocol/xml -google.golang.org/protobuf/internal/protolazy crypto/rand crypto/elliptic crypto/internal/boring/bbig encoding/asn1 crypto/dsa -google.golang.org/protobuf/internal/encoding/json -google.golang.org/protobuf/reflect/protoregistry -google.golang.org/protobuf/internal/encoding/text +google.golang.org/grpc/grpclog +google.golang.org/protobuf/proto github.com/ProtonMail/go-crypto/openpgp/internal/encoding +github.com/src-d/gcfg github.com/aws/smithy-go/time -google.golang.org/grpc/connectivity -google.golang.org/grpc/internal/grpclog +github.com/aws/smithy-go/document crypto/ed25519 crypto/internal/hpke crypto/rsa go.opencensus.io/trace github.com/cloudflare/circl/math +google.golang.org/grpc/connectivity +google.golang.org/grpc/internal/grpclog github.com/ProtonMail/go-crypto/openpgp/elgamal github.com/aws/aws-sdk-go-v2/internal/rand github.com/aws/smithy-go/rand -github.com/aws/smithy-go/document -github.com/aws/smithy-go/encoding/json -github.com/aws/smithy-go/encoding/xml -github.com/docker/cli/cli/config/credentials -github.com/google/go-containerregistry/internal/verify -github.com/google/go-containerregistry/pkg/v1/match -github.com/klauspost/compress/zstd -github.com/google/go-containerregistry/pkg/v1/stream -go.mongodb.org/mongo-driver/bson/primitive -github.com/aws/smithy-go/waiter github.com/aws/aws-sdk-go-v2/service/sso/types github.com/aws/aws-sdk-go-v2/service/ssooidc/types -github.com/cyphar/filepath-securejoin +github.com/aws/smithy-go/encoding/json github.com/aws/aws-sdk-go-v2/service/sts/types +github.com/aws/smithy-go/encoding/xml github.com/aws/aws-sdk-go-v2/service/ecr/types github.com/aws/aws-sdk-go-v2/service/ecrpublic/types -github.com/sirupsen/logrus +github.com/docker/docker-credential-helpers/client +go.mongodb.org/mongo-driver/bson/primitive +github.com/klauspost/compress/zstd +github.com/aws/smithy-go/waiter github.com/go-openapi/swag/jsonutils/adapters go.uber.org/multierr golang.org/x/crypto/ed25519 -google.golang.org/protobuf/internal/encoding/defval +go.opencensus.io/stats/internal github.com/secure-systems-lab/go-securesystemslib/encrypted -go.opencensus.io/tag -golang.org/x/term golang.org/x/crypto/openpgp/elgamal -golang.org/x/oauth2/jws -google.golang.org/protobuf/proto -github.com/jedisct1/go-minisign +go.opencensus.io/stats +github.com/google/certificate-transparency-go/asn1 +github.com/go-git/go-git/internal/path_util +github.com/aws/aws-sdk-go-v2/internal/shareddefaults +github.com/kevinburke/ssh_config +github.com/docker/docker/pkg/homedir +github.com/google/go-containerregistry/internal/verify +github.com/google/go-containerregistry/pkg/v1/match +archive/tar +github.com/google/go-containerregistry/pkg/v1/stream +github.com/vbatts/tar-split/archive/tar github.com/ProtonMail/go-crypto/bitcurves github.com/ProtonMail/go-crypto/brainpool -go.uber.org/zap/zapcore -github.com/sigstore/sigstore/pkg/signature/options -github.com/google/certificate-transparency-go/asn1 +html/template +github.com/docker/cli/cli/config/credentials +github.com/jedisct1/go-minisign github.com/go-openapi/swag/jsonutils +github.com/go-git/go-git/plumbing/format/config github.com/dustin/go-humanize +go.opencensus.io/stats/view +go.uber.org/zap/zapcore +golang.org/x/oauth2/jws +google.golang.org/protobuf/internal/filedesc +google.golang.org/protobuf/encoding/prototext github.com/google/go-containerregistry/pkg/v1/static -go.mongodb.org/mongo-driver/x/bsonx/bsoncore +github.com/sigstore/sigstore/pkg/signature/options golang.org/x/mod/sumdb/note -github.com/fsnotify/fsnotify/internal +github.com/go-git/go-git/plumbing/format/objfile go.opentelemetry.io/otel/metric -go.opentelemetry.io/otel/trace go.opentelemetry.io/otel/semconv/v1.17.0 -github.com/theupdateframework/go-tuf/v0/util -github.com/syndtr/goleveldb/leveldb/iterator -github.com/syndtr/goleveldb/leveldb/journal -github.com/spf13/viper/internal/encoding/toml -github.com/src-d/gcfg +go.opentelemetry.io/otel/trace +github.com/theupdateframework/go-tuf/v0/data +github.com/syndtr/goleveldb/leveldb golang.org/x/crypto/nacl/box gopkg.in/inf.v0 -github.com/fxamacker/cbor +go.mongodb.org/mongo-driver/x/bsonx/bsoncore go/doc -github.com/go-logr/logr -k8s.io/klog/internal/sloghandler -go.opencensus.io/stats/internal +github.com/fxamacker/cbor +vendor/golang.org/x/crypto/cryptobyte +crypto/x509/pkix +golang.org/x/crypto/cryptobyte +github.com/awslabs/amazon-ecr-credential-helper/ecr-login/config +github.com/docker/cli/cli/config/configfile +github.com/go-openapi/swag/yamlutils +github.com/spf13/viper/internal/encoding/yaml +github.com/go-git/go-git/config +github.com/go-git/go-git/plumbing/format/gitignore go/parser -k8s.io/apimachinery/pkg/util/framer +sigs.k8s.io/json/internal/golang/encoding/json +github.com/sigstore/cosign/internal/pkg/cosign/payload/size +github.com/theupdateframework/go-tuf/v0/util +github.com/google/gnostic-models/jsonschema github.com/json-iterator/go -go.opencensus.io/stats -k8s.io/apimachinery/pkg/util/dump -github.com/fsnotify/fsnotify +k8s.io/apimachinery/pkg/util/framer github.com/evanphx/json-patch/v5 -github.com/google/go-cmp/cmp -html/template github.com/segmentio/ksuid -github.com/sigstore/sigstore/pkg/oauth -github.com/syndtr/goleveldb/leveldb/memdb -github.com/sigstore/cosign/internal/pkg/cosign/payload/size -github.com/go-openapi/swag/yamlutils -github.com/go-git/go-billy/v5/osfs -github.com/go-git/go-git/plumbing/format/config -github.com/spf13/viper/internal/encoding/yaml -go.opencensus.io/stats/view -vendor/golang.org/x/crypto/cryptobyte -crypto/x509/pkix -golang.org/x/crypto/cryptobyte -github.com/go-logr/logr/funcr -github.com/syndtr/goleveldb/leveldb/table -k8s.io/klog/internal/serialize -github.com/aws/aws-sdk-go-v2/service/kms/types +github.com/go-logr/logr +k8s.io/klog/internal/sloghandler github.com/tink-crypto/tink-go/subtle/random github.com/tink-crypto/tink-go/internal/signature/ecdsa +github.com/sigstore/sigstore/pkg/oauth +github.com/aws/aws-sdk-go-v2/service/kms/types github.com/tink-crypto/tink-go/secretdata github.com/tink-crypto/tink-go/subtle -github.com/aws/aws-sdk-go/internal/ini -github.com/cloudflare/circl/internal/conv -go.step.sm/crypto/x25519 -github.com/awslabs/amazon-ecr-credential-helper/ecr-login/config -github.com/docker/cli/cli/config/configfile +github.com/aws/aws-sdk-go/internal/shareddefaults github.com/aws/aws-sdk-go/aws/awsutil -github.com/google/certificate-transparency-go/x509/pkix -go.step.sm/crypto/randutil -github.com/sigstore/gitsign/internal/cache/api +github.com/go-git/go-git/storage +github.com/docker/cli/cli/config +github.com/aws/aws-sdk-go/aws/credentials github.com/aws/aws-sdk-go/aws/endpoints -github.com/mattn/go-tty +go.step.sm/crypto/x25519 +github.com/spf13/viper/internal/encoding/toml +go.step.sm/crypto/randutil github.com/patrickmn/go-cache -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext -github.com/go-logr/stdr +github.com/cpuguy83/go-md2man/v2/md2man +github.com/google/certificate-transparency-go/x509/pkix +github.com/go-git/go-git/storage/memory +github.com/go-git/go-git/storage/filesystem/dotgit +github.com/cloudflare/circl/internal/conv +github.com/aws/aws-sdk-go/aws/credentials/processcreds +k8s.io/klog/internal/serialize +github.com/go-logr/logr/funcr +sigs.k8s.io/yaml crypto/ecdsa github.com/cloudflare/circl/math/fp448 github.com/cloudflare/circl/math/mlsbset github.com/cloudflare/circl/math/fp25519 -github.com/go-git/go-git/plumbing/format/objfile -github.com/syndtr/goleveldb/leveldb -github.com/google/gnostic-models/jsonschema -github.com/cpuguy83/go-md2man/v2/md2man -github.com/go-git/go-git/config -sigs.k8s.io/json -go.mongodb.org/mongo-driver/bson/bsonrw -k8s.io/apimachinery/pkg/util/json -github.com/sigstore/gitsign/internal/io -github.com/go-git/go-git/internal/path_util -github.com/kevinburke/ssh_config -github.com/aws/aws-sdk-go-v2/internal/shareddefaults -github.com/docker/docker/pkg/homedir -archive/tar -github.com/vbatts/tar-split/archive/tar -github.com/aws/aws-sdk-go/internal/shareddefaults -k8s.io/klog github.com/spf13/cast -github.com/cloudflare/circl/sign/ed25519 +github.com/go-git/go-git/plumbing/protocol/packp +k8s.io/klog +k8s.io/apimachinery/pkg/util/mergepatch github.com/cloudflare/circl/dh/x25519 +github.com/cloudflare/circl/sign/ed25519 +github.com/go-git/go-git/storage/filesystem github.com/cloudflare/circl/dh/x448 github.com/cloudflare/circl/ecc/goldilocks -github.com/go-git/go-git/plumbing/format/gitignore -github.com/go-git/go-git/storage -github.com/docker/cli/cli/config -sigs.k8s.io/yaml -go.uber.org/zap/internal -github.com/go-git/go-git/storage/memory -github.com/go-git/go-git/storage/filesystem/dotgit -github.com/aws/aws-sdk-go/aws/credentials -github.com/ProtonMail/go-crypto/openpgp/ed25519 -github.com/go-git/go-git/plumbing/protocol/packp -github.com/aws/aws-sdk-go/aws/credentials/processcreds -k8s.io/apimachinery/pkg/util/yaml -k8s.io/apimachinery/pkg/util/mergepatch -github.com/cloudflare/circl/sign/ed448 +github.com/go-logr/stdr +go.mongodb.org/mongo-driver/bson/bsonrw +google.golang.org/protobuf/internal/encoding/tag +google.golang.org/protobuf/encoding/protojson github.com/ProtonMail/go-crypto/openpgp/x25519 -github.com/spiffe/go-spiffe/internal/cryptoutil +go.uber.org/zap/internal +google.golang.org/protobuf/internal/impl github.com/go-jose/go-jose/cipher +github.com/spiffe/go-spiffe/internal/cryptoutil +github.com/go-git/go-git/plumbing/transport +github.com/ProtonMail/go-crypto/openpgp/ed25519 golang.org/x/crypto/openpgp/packet github.com/google/certificate-transparency-go/tls github.com/go-jose/go-jose/v3/cipher -github.com/tink-crypto/tink-go/signature/subtle gopkg.in/square/go-jose.v2/cipher -github.com/ProtonMail/go-crypto/openpgp/ed448 +github.com/tink-crypto/tink-go/signature/subtle github.com/spiffe/go-spiffe/internal/jwtutil -go.mongodb.org/mongo-driver/bson/bsoncodec +github.com/go-git/go-git/plumbing/transport/internal/common +github.com/spf13/viper/internal/encoding/dotenv github.com/ProtonMail/go-crypto/openpgp/x448 +github.com/cloudflare/circl/sign/ed448 +sigs.k8s.io/json +k8s.io/apimachinery/pkg/util/json github.com/ProtonMail/go-crypto/openpgp/internal/ecc -github.com/spf13/viper/internal/encoding/dotenv -github.com/go-git/go-git/storage/filesystem -github.com/containerd/stargz-snapshotter/estargz +github.com/ProtonMail/go-crypto/openpgp/ed448 +k8s.io/apimachinery/pkg/util/yaml github.com/google/go-containerregistry/internal/zstd -google.golang.org/protobuf/encoding/protojson -google.golang.org/protobuf/internal/encoding/tag -github.com/go-git/go-git/plumbing/transport -github.com/google/go-containerregistry/internal/compression -github.com/google/go-containerregistry/pkg/v1/partial -github.com/go-git/go-git/plumbing/transport/internal/common github.com/ProtonMail/go-crypto/openpgp/ecdh github.com/ProtonMail/go-crypto/openpgp/ecdsa +github.com/containerd/stargz-snapshotter/estargz github.com/ProtonMail/go-crypto/openpgp/eddsa -google.golang.org/protobuf/internal/impl -github.com/google/go-containerregistry/pkg/v1/empty github.com/ProtonMail/go-crypto/openpgp/packet golang.org/x/crypto/openpgp -sigs.k8s.io/structured-merge-diff/value +github.com/google/go-containerregistry/internal/compression +github.com/google/go-containerregistry/pkg/v1/partial k8s.io/apimachinery/pkg/runtime/serializer/cbor/internal/modes -go.mongodb.org/mongo-driver/bson -k8s.io/apimachinery/pkg/runtime/serializer/cbor/direct -k8s.io/apimachinery/pkg/api/resource -k8s.io/apimachinery/pkg/runtime/schema -net/textproto +go.mongodb.org/mongo-driver/bson/bsoncodec +sigs.k8s.io/structured-merge-diff/value +github.com/google/go-containerregistry/pkg/v1/empty vendor/golang.org/x/net/http/httpproxy +net/textproto google.golang.org/grpc/internal google.golang.org/grpc/internal/syscall -google.golang.org/grpc/internal/resolver/dns/internal +crypto/x509 github.com/go-git/go-git/plumbing/transport/git golang.org/x/net/internal/socks -k8s.io/utils/internal/third_party/forked/golang/net +github.com/go-openapi/swag/netutils github.com/mitchellh/mapstructure +github.com/google/uuid github.com/go-viper/mapstructure/v2 +k8s.io/utils/internal/third_party/forked/golang/net +google.golang.org/grpc/internal/resolver/dns/internal +k8s.io/client-go/util/connrotation +github.com/google/go-containerregistry/pkg/name github.com/google/certificate-transparency-go/x509 github.com/spf13/pflag -github.com/google/uuid -github.com/google/go-containerregistry/pkg/name -k8s.io/client-go/util/connrotation -k8s.io/apimachinery/pkg/util/intstr -github.com/go-openapi/swag/netutils -crypto/x509 -github.com/google/go-containerregistry/internal/estargz -sigs.k8s.io/structured-merge-diff/fieldpath +k8s.io/apimachinery/pkg/runtime/serializer/cbor/direct k8s.io/utils/net -golang.org/x/net/proxy -google.golang.org/grpc/metadata google.golang.org/grpc/experimental/stats +google.golang.org/grpc/metadata google.golang.org/grpc/codes google.golang.org/grpc/mem +golang.org/x/net/proxy +k8s.io/apimachinery/pkg/util/validation vendor/golang.org/x/net/http/httpguts -mime/multipart golang.org/x/net/http/httpguts net/mail +mime/multipart github.com/sigstore/sigstore/pkg/signature/payload -github.com/google/go-containerregistry/pkg/v1/tarball github.com/google/go-containerregistry/pkg/authn google.golang.org/grpc/internal/balancerload google.golang.org/grpc/internal/grpcutil google.golang.org/grpc/tap google.golang.org/grpc/stats github.com/ProtonMail/go-crypto/openpgp -google.golang.org/grpc/internal/stats google.golang.org/grpc/encoding +google.golang.org/grpc/internal/stats github.com/google/go-containerregistry/pkg/authn/github -k8s.io/apimachinery/pkg/util/validation -github.com/go-openapi/swag/fileutils -github.com/google/go-containerregistry/pkg/v1/mutate +sigs.k8s.io/structured-merge-diff/fieldpath k8s.io/apimachinery/pkg/labels -github.com/google/go-containerregistry/pkg/v1/layout +k8s.io/apimachinery/pkg/runtime/schema +k8s.io/apimachinery/pkg/api/resource +k8s.io/apimachinery/pkg/util/intstr +github.com/go-openapi/swag/fileutils github.com/go-git/go-git/plumbing/object -sigs.k8s.io/structured-merge-diff/typed -github.com/go-jose/go-jose -github.com/spiffe/go-spiffe/internal/pemutil +github.com/google/certificate-transparency-go github.com/spiffe/go-spiffe/internal/x509util -crypto/tls -github.com/secure-systems-lab/go-securesystemslib/signerverifier -github.com/asaskevich/govalidator +github.com/spiffe/go-spiffe/internal/pemutil github.com/sigstore/sigstore/pkg/cryptoutils -github.com/go-jose/go-jose/v3 -github.com/digitorus/pkcs7 -golang.org/x/crypto/ssh -github.com/theupdateframework/go-tuf/v0/pkg/keys +github.com/asaskevich/govalidator +github.com/secure-systems-lab/go-securesystemslib/signerverifier k8s.io/client-go/util/keyutil -gopkg.in/square/go-jose.v2 -github.com/google/certificate-transparency-go -github.com/sigstore/gitsign/internal +github.com/theupdateframework/go-tuf/v0/pkg/keys +github.com/digitorus/pkcs7 github.com/github/smimesign/ietf-cms/oid -github.com/spiffe/go-spiffe/bundle/x509bundle -github.com/sigstore/gitsign/internal/gpg -github.com/github/smimesign/ietf-cms/protocol -github.com/spiffe/go-spiffe/svid/x509svid +github.com/go-jose/go-jose +crypto/tls +github.com/go-jose/go-jose/v3 +github.com/sigstore/gitsign/internal +gopkg.in/square/go-jose.v2 +golang.org/x/crypto/ssh github.com/spf13/cobra -github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/google/certificate-transparency-go/gossip/minimal/x509ext github.com/sigstore/cosign/pkg/cosign/fulcioverifier/ctutil -github.com/sigstore/gitsign/internal/git/gittest +github.com/github/smimesign/ietf-cms/protocol +github.com/google/go-containerregistry/internal/estargz +github.com/sigstore/gitsign/internal/gpg +github.com/spiffe/go-spiffe/bundle/x509bundle +go.mongodb.org/mongo-driver/bson +github.com/google/go-containerregistry/pkg/v1/tarball +sigs.k8s.io/structured-merge-diff/typed +github.com/sigstore/sigstore-go/pkg/fulcio/certificate +github.com/spiffe/go-spiffe/svid/x509svid +github.com/theupdateframework/go-tuf/v0/internal/signer +github.com/theupdateframework/go-tuf/v0/sign +github.com/theupdateframework/go-tuf/v0/verify +github.com/digitorus/timestamp github.com/go-git/go-git/plumbing/revlist -google.golang.org/protobuf/internal/filetype +github.com/sigstore/gitsign/internal/git/gittest +github.com/theupdateframework/go-tuf/v0/pkg/targets github.com/go-git/go-git/plumbing/transport/server -github.com/digitorus/timestamp +github.com/theupdateframework/go-tuf/v0 +github.com/sigstore/timestamp-authority/pkg/verification +github.com/google/go-containerregistry/pkg/v1/mutate +github.com/go-git/go-git/plumbing/transport/file +github.com/go-jose/go-jose/v3/jwt +sigs.k8s.io/release-utils/version +github.com/sigstore/gitsign/internal/commands/version +github.com/spf13/cobra/doc +google.golang.org/protobuf/internal/filetype +github.com/go-jose/go-jose/jwt +github.com/spiffe/go-spiffe/bundle/jwtbundle +github.com/google/go-containerregistry/pkg/v1/layout +github.com/spiffe/go-spiffe/bundle/spiffebundle google.golang.org/protobuf/runtime/protoimpl -github.com/theupdateframework/go-tuf/v0/internal/signer -github.com/theupdateframework/go-tuf/v0/verify -github.com/theupdateframework/go-tuf/v0/sign google.golang.org/protobuf/protoadapt google.golang.org/protobuf/types/known/durationpb google.golang.org/protobuf/types/known/timestamppb google.golang.org/protobuf/types/known/structpb google.golang.org/protobuf/types/known/anypb -google.golang.org/protobuf/types/descriptorpb github.com/sigstore/protobuf-specs/gen/pb-go/dsse google.golang.org/protobuf/types/known/fieldmaskpb -github.com/tink-crypto/tink-go/proto/common_go_proto github.com/tink-crypto/tink-go/proto/tink_go_proto -github.com/tink-crypto/tink-go/proto/ed25519_go_proto +google.golang.org/protobuf/types/descriptorpb +github.com/tink-crypto/tink-go/proto/common_go_proto google.golang.org/genproto/googleapis/rpc/code -github.com/go-git/go-git/plumbing/transport/file -github.com/sigstore/timestamp-authority/pkg/verification +github.com/tink-crypto/tink-go/proto/ed25519_go_proto +github.com/spiffe/go-spiffe/svid/jwtsvid sigs.k8s.io/structured-merge-diff/merge k8s.io/client-go/applyconfigurations/internal -google.golang.org/grpc/internal/pretty google.golang.org/grpc/encoding/proto -github.com/theupdateframework/go-tuf/v0/pkg/targets +google.golang.org/grpc/internal/pretty +github.com/golang/protobuf/ptypes/timestamp +github.com/google/certificate-transparency-go/client/configpb github.com/golang/protobuf/ptypes/duration google.golang.org/genproto/googleapis/rpc/errdetails -github.com/tink-crypto/tink-go/proto/ecdsa_go_proto google.golang.org/genproto/googleapis/rpc/status github.com/google/gnostic-models/extensions +github.com/tink-crypto/tink-go/proto/ecdsa_go_proto github.com/googleapis/gax-go/v2/apierror/internal/proto -github.com/golang/protobuf/ptypes/timestamp -github.com/google/certificate-transparency-go/client/configpb github.com/tink-crypto/tink-go/core/cryptofmt github.com/tink-crypto/tink-go/core/registry -github.com/theupdateframework/go-tuf/v0 -github.com/go-jose/go-jose/v3/jwt -google.golang.org/grpc/binarylog/grpc_binarylog_v1 -google.golang.org/grpc/internal/status github.com/in-toto/attestation/go/v1 +google.golang.org/grpc/internal/status +google.golang.org/grpc/binarylog/grpc_binarylog_v1 github.com/tink-crypto/tink-go/internal/primitiveset github.com/tink-crypto/tink-go/internal/registryconfig -github.com/tink-crypto/tink-go/internal/internalregistry github.com/tink-crypto/tink-go/internal/protoserialization +github.com/tink-crypto/tink-go/internal/internalregistry google.golang.org/grpc/status -sigs.k8s.io/release-utils/version -github.com/sigstore/gitsign/internal/commands/version -github.com/go-jose/go-jose/jwt -github.com/spiffe/go-spiffe/bundle/jwtbundle -github.com/spf13/cobra/doc github.com/google/trillian/client/backoff -google.golang.org/grpc/internal/binarylog github.com/tink-crypto/tink-go/keyset -github.com/spiffe/go-spiffe/bundle/spiffebundle -github.com/spiffe/go-spiffe/svid/jwtsvid -github.com/tink-crypto/tink-go/signature/ed25519 +google.golang.org/grpc/internal/binarylog github.com/tink-crypto/tink-go/signature/ecdsa +github.com/tink-crypto/tink-go/signature/ed25519 google.golang.org/genproto/googleapis/api/annotations +golang.org/x/crypto/ssh/knownhosts +go.step.sm/crypto/keyutil +github.com/secure-systems-lab/go-securesystemslib/dsse +golang.org/x/crypto/ssh/agent +github.com/in-toto/in-toto-golang/in_toto +github.com/skeema/knownhosts +go.step.sm/crypto/pemutil github.com/sigstore/protobuf-specs/gen/pb-go/common/v1 github.com/sigstore/sigstore/pkg/signature/tink +github.com/xanzy/ssh-agent +github.com/go-git/go-git/plumbing/transport/ssh github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1 -github.com/sigstore/sigstore/pkg/signature github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1 +github.com/sigstore/sigstore/pkg/signature github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1 +github.com/sigstore/cosign/pkg/cosign/attestation +github.com/sigstore/rekor/pkg/pki/x509 +github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier +github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding +github.com/sigstore/cosign/pkg/cosign/pivkey +github.com/sigstore/cosign/pkg/cosign/pkcs11key +github.com/sigstore/gitsign/internal/signerverifier +github.com/sigstore/rekor/pkg/pki/minisign +github.com/theupdateframework/go-tuf/metadata +github.com/sigstore/sigstore/pkg/signature/dsse net/http/httptrace google.golang.org/api/transport/cert +github.com/coreos/go-systemd/activation google.golang.org/grpc/internal/credentials k8s.io/client-go/util/cert github.com/sassoftware/relic/lib/x509tools -github.com/coreos/go-systemd/activation -golang.org/x/crypto/ssh/knownhosts -github.com/secure-systems-lab/go-securesystemslib/dsse -go.step.sm/crypto/keyutil -golang.org/x/crypto/ssh/agent +github.com/sigstore/sigstore/pkg/signature/kms/cliplugin google.golang.org/grpc/credentials net/http -github.com/in-toto/in-toto-golang/in_toto -github.com/sigstore/rekor/pkg/pki/minisign -github.com/sigstore/rekor/pkg/pki/x509 -github.com/theupdateframework/go-tuf/metadata -github.com/sigstore/sigstore/pkg/signature/dsse -github.com/sigstore/cosign/pkg/cosign/pkcs11key -github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding -github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier -github.com/sigstore/cosign/pkg/cosign/pivkey -github.com/sigstore/gitsign/internal/signerverifier -go.step.sm/crypto/pemutil -google.golang.org/grpc/internal/channelz -google.golang.org/grpc/resolver -google.golang.org/grpc/credentials/insecure +github.com/sassoftware/relic/lib/pkcs7 +github.com/theupdateframework/go-tuf/metadata/trustedmetadata +github.com/sigstore/sigstore/pkg/signature/kms google.golang.org/grpc/peer -github.com/sigstore/sigstore/pkg/signature/kms/cliplugin -github.com/skeema/knownhosts -google.golang.org/grpc/internal/metadata +google.golang.org/grpc/credentials/insecure +google.golang.org/grpc/resolver +google.golang.org/grpc/internal/channelz +github.com/sigstore/rekor/pkg/pki/pkcs7 google.golang.org/grpc/internal/resolver/passthrough google.golang.org/grpc/balancer/grpclb/state google.golang.org/grpc/internal/transport/networktype -google.golang.org/grpc/internal/resolver/dns -github.com/sigstore/sigstore/pkg/signature/kms +google.golang.org/grpc/internal/metadata google.golang.org/grpc/internal/resolver/unix -github.com/sassoftware/relic/lib/pkcs7 -github.com/xanzy/ssh-agent +google.golang.org/grpc/internal/resolver/dns google.golang.org/grpc/resolver/dns -github.com/go-git/go-git/plumbing/transport/ssh -github.com/sigstore/rekor/pkg/pki/pkcs7 google.golang.org/grpc/channelz google.golang.org/grpc/balancer google.golang.org/grpc/balancer/base -google.golang.org/grpc/balancer/pickfirst google.golang.org/grpc/internal/serviceconfig -github.com/sigstore/cosign/pkg/cosign/attestation +google.golang.org/grpc/balancer/pickfirst google.golang.org/grpc/internal/resolver -google.golang.org/grpc/internal/balancer/gracefulswitch google.golang.org/grpc/balancer/roundrobin -github.com/theupdateframework/go-tuf/metadata/trustedmetadata -github.com/sigstore/cosign/pkg/providers/github +google.golang.org/grpc/internal/balancer/gracefulswitch cloud.google.com/go/compute/metadata +google.golang.org/api/googleapi/transport +go.opencensus.io/trace/propagation +github.com/aws/smithy-go/endpoints golang.org/x/oauth2/internal golang.org/x/net/trace -golang.org/x/net/http2 -go.opencensus.io/trace/propagation -net/http/httputil -google.golang.org/api/googleapi/transport github.com/go-git/go-git/plumbing/transport/http -github.com/aws/smithy-go/endpoints -github.com/aws/smithy-go/encoding/httpbinding github.com/docker/distribution/registry/client/auth/challenge -github.com/go-openapi/swag/loading -github.com/go-openapi/errors expvar -github.com/go-chi/chi +github.com/aws/smithy-go/encoding/httpbinding +github.com/go-openapi/errors +net/http/httputil net/http/pprof -go.uber.org/zap -github.com/sigstore/rekor/pkg/pki/pgp +github.com/go-openapi/swag/loading +github.com/go-chi/chi github.com/sigstore/rekor/pkg/pki/ssh +github.com/sigstore/rekor/pkg/pki/pgp +github.com/sigstore/cosign/pkg/providers/github github.com/sigstore/cosign/pkg/blob -github.com/google/certificate-transparency-go/x509util -github.com/sigstore/rekor/pkg/util -go.opentelemetry.io/otel/semconv/internal/v2 -go.opentelemetry.io/otel/propagation +golang.org/x/net/http2 +github.com/theupdateframework/go-tuf/v0/client +github.com/go-openapi/runtime/middleware/header github.com/google/certificate-transparency-go/jsonclient +net/http/httptest +github.com/theupdateframework/go-tuf/metadata/fetcher k8s.io/apimachinery/pkg/util/runtime github.com/hashicorp/go-cleanhttp -github.com/theupdateframework/go-tuf/metadata/fetcher -github.com/opentracing/opentracing-go +github.com/go-openapi/runtime/middleware/denco github.com/sigstore/cosign/internal/pkg/cosign/tsa/client -github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp +github.com/sigstore/rekor/pkg/util +github.com/google/certificate-transparency-go/x509util github.com/google/gnostic-models/compiler -github.com/go-openapi/runtime/middleware/header -github.com/spf13/afero -net/http/httptest -github.com/aws/aws-sdk-go/aws -github.com/theupdateframework/go-tuf/v0/client -github.com/go-openapi/runtime/middleware/denco +go.uber.org/zap github.com/sigstore/fulcio/pkg/api +github.com/spf13/afero +github.com/opentracing/opentracing-go +go.opentelemetry.io/otel/propagation +go.opentelemetry.io/otel/semconv/internal/v2 github.com/emicklei/go-restful +github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/google/go-github/github -google.golang.org/api/googleapi -net/rpc go.opencensus.io/plugin/ochttp/propagation/b3 +github.com/aws/aws-sdk-go/aws google.golang.org/api/transport/http/internal/propagation github.com/theupdateframework/go-tuf/metadata/config -github.com/sigstore/gitsign/internal/fork/ietf-cms -golang.org/x/oauth2 -github.com/theupdateframework/go-tuf/metadata/updater +google.golang.org/api/googleapi github.com/hashicorp/go-retryablehttp -github.com/opentracing/opentracing-go/ext +net/rpc go.opencensus.io/plugin/ochttp -go.opentelemetry.io/otel/internal/global +github.com/theupdateframework/go-tuf/metadata/updater +golang.org/x/oauth2 +k8s.io/apimachinery/pkg/util/wait k8s.io/apimachinery/pkg/runtime k8s.io/client-go/features k8s.io/client-go/util/workqueue -k8s.io/apimachinery/pkg/util/wait -go.opentelemetry.io/otel/semconv/v1.17.0/httpconv -github.com/google/certificate-transparency-go/client +github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/go-openapi/swag -github.com/googleapis/gax-go/v2/apierror -github.com/sigstore/rekor/pkg/pki +github.com/opentracing/opentracing-go/ext +github.com/google/certificate-transparency-go/client +go.opentelemetry.io/otel/internal/global github.com/go-openapi/strfmt -github.com/aws/smithy-go/transport/http +github.com/sigstore/rekor/pkg/pki +go.opentelemetry.io/otel/semconv/v1.17.0/httpconv +github.com/go-git/go-git/plumbing/transport/client +github.com/go-git/go-git +github.com/googleapis/gax-go/v2/apierror +github.com/theupdateframework/go-tuf/v0/client/leveldbstore +github.com/google/gnostic-models/openapiv3 +github.com/google/certificate-transparency-go/loglist3 github.com/google/gnostic-models/openapiv2 +github.com/aws/smithy-go/transport/http github.com/google/go-containerregistry/pkg/v1/remote/transport -github.com/google/gnostic-models/openapiv3 -github.com/go-git/go-git/plumbing/transport/client +github.com/sigstore/sigstore/pkg/tuf github.com/aws/aws-sdk-go/aws/auth/bearer github.com/aws/aws-sdk-go/aws/request -github.com/theupdateframework/go-tuf/v0/client/leveldbstore -github.com/go-git/go-git +golang.org/x/oauth2/authhandler golang.org/x/oauth2/google/internal/impersonate golang.org/x/oauth2/google/internal/stsexchange golang.org/x/oauth2/jwt google.golang.org/api/internal/impersonate -github.com/sigstore/sigstore/pkg/tuf github.com/coreos/go-oidc/v3/oidc -golang.org/x/oauth2/authhandler -github.com/google/certificate-transparency-go/loglist3 -github.com/go-chi/chi/middleware github.com/sigstore/sigstore-go/pkg/tuf -github.com/google/go-containerregistry/pkg/v1/remote -go.opentelemetry.io/otel +gitlab.com/gitlab-org/api/client-go +github.com/go-chi/chi/middleware +github.com/google/certificate-transparency-go/ctutil golang.org/x/oauth2/google/internal/externalaccountauthorizeduser golang.org/x/oauth2/google/externalaccount +github.com/go-openapi/jsonpointer +go.opentelemetry.io/otel github.com/sigstore/gitsign/internal/cache +github.com/sigstore/sigstore/pkg/fulcioroots +github.com/sigstore/gitsign/internal/fulcio/fulcioroots +github.com/sigstore/sigstore/pkg/oauthflow +github.com/google/go-containerregistry/pkg/v1/remote +github.com/go-openapi/jsonreference +github.com/sigstore/cosign/internal/pkg/cosign/fulcio/fulcioroots +github.com/sigstore/sigstore-go/pkg/root +github.com/sagikazarmark/locafero +k8s.io/kube-openapi/pkg/internal +github.com/go-openapi/spec +golang.org/x/oauth2/google github.com/aws/smithy-go/auth/bearer github.com/aws/aws-sdk-go-v2/internal/auth -github.com/aws/aws-sdk-go-v2/aws/protocol/query -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding github.com/aws/aws-sdk-go-v2/internal/endpoints/awsrulesfn +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding +github.com/aws/aws-sdk-go-v2/aws/protocol/query github.com/aws/smithy-go/private/requestcompression -gitlab.com/gitlab-org/api/client-go -github.com/go-openapi/jsonpointer -github.com/google/certificate-transparency-go/ctutil +github.com/aws/aws-sdk-go/aws/client github.com/aws/aws-sdk-go/aws/corehandlers github.com/aws/aws-sdk-go/private/protocol github.com/aws/aws-sdk-go/aws/csm -github.com/aws/aws-sdk-go/aws/client +github.com/spf13/viper +github.com/go-openapi/runtime github.com/aws/aws-sdk-go-v2/aws -github.com/sigstore/sigstore/pkg/oauthflow -github.com/sigstore/sigstore/pkg/fulcioroots -github.com/sigstore/gitsign/internal/fulcio/fulcioroots +github.com/sigstore/rekor/pkg/log github.com/aws/aws-sdk-go/aws/ec2metadata -github.com/sigstore/sigstore-go/pkg/root -github.com/go-openapi/jsonreference +github.com/sigstore/gitsign/pkg/fulcio +github.com/google/go-containerregistry/pkg/v1/google +github.com/go-openapi/runtime/yamlpc +github.com/go-openapi/runtime/security github.com/aws/aws-sdk-go/private/protocol/rest -github.com/aws/aws-sdk-go/private/protocol/json/jsonutil github.com/aws/aws-sdk-go/private/protocol/query/queryutil +github.com/aws/aws-sdk-go/private/protocol/json/jsonutil github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil -github.com/sigstore/cosign/internal/pkg/cosign/fulcio/fulcioroots -github.com/sigstore/rekor/pkg/log -k8s.io/kube-openapi/pkg/internal -github.com/go-openapi/spec -golang.org/x/oauth2/google -github.com/aws/aws-sdk-go-v2/aws/middleware github.com/aws/aws-sdk-go-v2/credentials +github.com/aws/aws-sdk-go-v2/aws/middleware github.com/aws/aws-sdk-go-v2/credentials/processcreds github.com/aws/aws-sdk-go-v2/aws/defaults github.com/aws/aws-sdk-go-v2/aws/signer/internal/v4 -github.com/aws/aws-sdk-go-v2/internal/configsources github.com/aws/aws-sdk-go-v2/internal/endpoints github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 +github.com/aws/aws-sdk-go-v2/internal/configsources github.com/awslabs/amazon-ecr-credential-helper/ecr-login/cache -github.com/sigstore/gitsign/pkg/fulcio -github.com/sagikazarmark/locafero -github.com/aws/aws-sdk-go/aws/credentials/endpointcreds -github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds -github.com/aws/aws-sdk-go/private/protocol/query -github.com/aws/aws-sdk-go/private/protocol/jsonrpc -github.com/aws/aws-sdk-go/aws/signer/v4 -github.com/go-openapi/runtime -github.com/spf13/viper +github.com/sigstore/gitsign/internal/fulcio github.com/aws/aws-sdk-go-v2/service/sso/internal/endpoints github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints github.com/aws/aws-sdk-go-v2/service/sts/internal/endpoints github.com/aws/aws-sdk-go-v2/service/ecr/internal/endpoints github.com/aws/aws-sdk-go-v2/service/ecrpublic/internal/endpoints github.com/aws/aws-sdk-go-v2/service/kms/internal/endpoints -github.com/sigstore/gitsign/internal/fulcio -github.com/aws/aws-sdk-go/aws/defaults -github.com/aws/aws-sdk-go/private/protocol/restjson -github.com/google/go-containerregistry/pkg/v1/google +k8s.io/apimachinery/pkg/runtime/serializer/recognizer +k8s.io/apimachinery/pkg/runtime/serializer/streaming +k8s.io/client-go/tools/clientcmd/api +github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds +github.com/sigstore/gitsign/internal/commands/show +github.com/sigstore/gitsign/internal/cache/service +github.com/aws/aws-sdk-go/aws/credentials/endpointcreds github.com/aws/aws-sdk-go-v2/aws/transport/http -github.com/aws/aws-sdk-go-v2/aws/signer/v4 github.com/aws/aws-sdk-go-v2/aws/retry +github.com/aws/aws-sdk-go-v2/aws/signer/v4 +github.com/aws/aws-sdk-go/private/protocol/query +github.com/aws/aws-sdk-go/private/protocol/jsonrpc +github.com/aws/aws-sdk-go/aws/signer/v4 +github.com/sigstore/gitsign/cmd/gitsign-credential-cache +github.com/aws/aws-sdk-go/aws/defaults +github.com/aws/aws-sdk-go/private/protocol/restjson +k8s.io/client-go/tools/clientcmd/api/v1 +github.com/go-openapi/analysis/internal/flatten/normalize +github.com/go-openapi/analysis/internal/flatten/operations +github.com/go-openapi/analysis/internal/flatten/replace +github.com/go-openapi/analysis/internal/flatten/schutils github.com/aws/aws-sdk-go/service/sts github.com/aws/aws-sdk-go/service/kms github.com/aws/aws-sdk-go/service/sso github.com/aws/aws-sdk-go/service/ssooidc -github.com/sigstore/gitsign/internal/cache/service -github.com/sigstore/gitsign/cmd/gitsign-credential-cache -github.com/go-openapi/runtime/security -github.com/go-openapi/runtime/yamlpc -k8s.io/apimachinery/pkg/runtime/serializer/streaming -k8s.io/apimachinery/pkg/runtime/serializer/recognizer -k8s.io/client-go/tools/clientcmd/api -github.com/aws/aws-sdk-go-v2/internal/auth/smithy +github.com/go-openapi/analysis/internal/flatten/sortref github.com/aws/aws-sdk-go-v2/service/internal/presigned-url -github.com/aws/aws-sdk-go-v2/feature/ec2/imds +github.com/aws/aws-sdk-go-v2/internal/auth/smithy github.com/aws/aws-sdk-go-v2/credentials/endpointcreds/internal/client +github.com/aws/aws-sdk-go-v2/feature/ec2/imds +k8s.io/apimachinery/pkg/util/net +google.golang.org/grpc/internal/transport github.com/aws/aws-sdk-go-v2/service/ssooidc +github.com/aws/aws-sdk-go-v2/service/sts +github.com/aws/aws-sdk-go-v2/service/kms github.com/aws/aws-sdk-go-v2/service/sso github.com/aws/aws-sdk-go-v2/service/ecrpublic -github.com/aws/aws-sdk-go-v2/service/sts -github.com/aws/aws-sdk-go/service/sso/ssoiface github.com/aws/aws-sdk-go-v2/service/ecr -k8s.io/client-go/tools/clientcmd/api/v1 -github.com/aws/aws-sdk-go-v2/service/kms -github.com/aws/aws-sdk-go/service/sts/stsiface +github.com/go-openapi/analysis github.com/aws/aws-sdk-go-v2/credentials/endpointcreds +github.com/aws/aws-sdk-go/service/sso/ssoiface +github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds github.com/aws/aws-sdk-go/aws/credentials/ssocreds +github.com/aws/aws-sdk-go/service/sts/stsiface +k8s.io/apimachinery/pkg/watch github.com/aws/aws-sdk-go/aws/credentials/stscreds -github.com/go-openapi/analysis/internal/flatten/normalize -github.com/go-openapi/analysis/internal/flatten/operations -github.com/go-openapi/analysis/internal/flatten/schutils -github.com/go-openapi/analysis/internal/flatten/replace -github.com/go-openapi/analysis/internal/flatten/sortref -github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds +k8s.io/client-go/transport +k8s.io/apimachinery/pkg/apis/meta/v1 github.com/aws/aws-sdk-go/aws/session -github.com/go-openapi/analysis -github.com/sigstore/gitsign/internal/commands/show -k8s.io/apimachinery/pkg/util/net -google.golang.org/grpc/internal/transport github.com/go-openapi/loads -k8s.io/apimachinery/pkg/watch -k8s.io/client-go/transport github.com/go-openapi/runtime/middleware/untyped github.com/go-openapi/validate +k8s.io/kube-openapi/pkg/validation/spec github.com/aws/aws-sdk-go-v2/credentials/ssocreds -k8s.io/apimachinery/pkg/apis/meta/v1 +google.golang.org/grpc +k8s.io/kube-openapi/pkg/util/proto github.com/aws/aws-sdk-go-v2/credentials/stscreds github.com/aws/aws-sdk-go-v2/config -k8s.io/kube-openapi/pkg/validation/spec -k8s.io/kube-openapi/pkg/util/proto -google.golang.org/grpc github.com/aws/aws-sdk-go/service/kms/kmsiface +k8s.io/kube-openapi/pkg/schemaconv +k8s.io/kube-openapi/pkg/spec3 +github.com/tink-crypto/tink-go-awskms/integration/awskms github.com/go-openapi/runtime/middleware github.com/sigstore/rekor/pkg/generated/models -github.com/tink-crypto/tink-go-awskms/integration/awskms -k8s.io/kube-openapi/pkg/spec3 -k8s.io/kube-openapi/pkg/schemaconv -github.com/go-openapi/runtime/client -k8s.io/kube-openapi/pkg/common github.com/spiffe/go-spiffe/proto/spiffe/workload -google.golang.org/api/internal -github.com/google/trillian github.com/googleapis/gax-go/v2 -google.golang.org/api/transport/internal/dca +github.com/google/trillian +google.golang.org/api/internal +github.com/go-openapi/runtime/client google.golang.org/api/option -github.com/spiffe/go-spiffe/workloadapi -github.com/sigstore/rekor/pkg/types -github.com/sigstore/rekor/pkg/generated/client/entries -github.com/sigstore/rekor/pkg/generated/client/index -github.com/sigstore/rekor/pkg/generated/client/pubkey -github.com/sigstore/rekor/pkg/generated/client/tlog -k8s.io/kube-openapi/pkg/handler3 +google.golang.org/api/transport/internal/dca +k8s.io/kube-openapi/pkg/common google.golang.org/api/internal/gensupport -github.com/google/trillian/types -github.com/google/trillian/client -google.golang.org/api/option/internaloption -google.golang.org/api/transport/http -github.com/sigstore/rekor/pkg/tle -github.com/sigstore/rekor/pkg/types/dsse -github.com/sigstore/rekor/pkg/types/hashedrekord -github.com/sigstore/rekor/pkg/types/intoto -github.com/sigstore/rekor/pkg/types/rekord -github.com/sigstore/cosign/pkg/providers/spiffe -github.com/sigstore/rekor/pkg/trillianclient +github.com/spiffe/go-spiffe/workloadapi k8s.io/apimachinery/pkg/api/errors -k8s.io/api/apidiscovery/v2 k8s.io/apimachinery/pkg/apis/meta/v1/unstructured -k8s.io/api/apidiscovery/v2beta1 +k8s.io/api/apidiscovery/v2 k8s.io/api/apiserverinternal/v1alpha1 k8s.io/api/authentication/v1 -k8s.io/api/authorization/v1 k8s.io/api/admissionregistration/v1 -k8s.io/api/certificates/v1alpha1 -k8s.io/api/coordination/v1 -k8s.io/api/flowcontrol/v1beta1 +k8s.io/api/authorization/v1 +k8s.io/api/apidiscovery/v2beta1 k8s.io/apimachinery/pkg/api/meta -k8s.io/api/rbac/v1beta1 +k8s.io/api/coordination/v1 +k8s.io/api/certificates/v1alpha1 k8s.io/api/flowcontrol/v1 -k8s.io/api/flowcontrol/v1beta2 -k8s.io/api/rbac/v1 -google.golang.org/api/idtoken +k8s.io/api/flowcontrol/v1beta1 k8s.io/api/flowcontrol/v1beta3 -google.golang.org/api/impersonate +k8s.io/api/flowcontrol/v1beta2 k8s.io/api/policy/v1 k8s.io/api/networking/v1alpha1 k8s.io/api/policy/v1beta1 +k8s.io/api/rbac/v1 +k8s.io/api/rbac/v1beta1 k8s.io/apimachinery/pkg/api/equality k8s.io/apimachinery/pkg/apis/meta/v1/validation -k8s.io/client-go/pkg/apis/clientauthentication -k8s.io/apimachinery/pkg/apis/meta/v1beta1 k8s.io/client-go/rest/watch +k8s.io/client-go/pkg/apis/clientauthentication k8s.io/api/rbac/v1alpha1 -google.golang.org/api/cloudkms/v1 -github.com/sigstore/cosign/pkg/cosign/bundle +k8s.io/apimachinery/pkg/apis/meta/v1beta1 k8s.io/api/core/v1 +google.golang.org/api/option/internaloption +google.golang.org/api/transport/http +github.com/google/trillian/types +k8s.io/client-go/pkg/apis/clientauthentication/v1 +k8s.io/client-go/pkg/apis/clientauthentication/v1beta1 +k8s.io/apimachinery/pkg/apis/meta/internalversion +github.com/google/trillian/client +google.golang.org/api/idtoken +google.golang.org/api/impersonate +google.golang.org/api/cloudkms/v1 +github.com/sigstore/rekor/pkg/types +github.com/sigstore/rekor/pkg/generated/client/index +github.com/sigstore/rekor/pkg/generated/client/pubkey +github.com/sigstore/rekor/pkg/generated/client/entries +github.com/sigstore/rekor/pkg/generated/client/tlog +k8s.io/kube-openapi/pkg/handler3 +k8s.io/api/coordination/v1beta1 +k8s.io/api/coordination/v1alpha2 +k8s.io/apimachinery/pkg/runtime/serializer/cbor +k8s.io/apimachinery/pkg/util/strategicpatch +k8s.io/apimachinery/pkg/runtime/serializer/versioning +github.com/sigstore/rekor/pkg/trillianclient +github.com/sigstore/cosign/pkg/providers/spiffe +k8s.io/client-go/pkg/apis/clientauthentication/install +k8s.io/apimachinery/pkg/apis/meta/internalversion/validation github.com/sigstore/rekor/pkg/generated/client +k8s.io/client-go/util/watchlist +github.com/sigstore/rekor/pkg/client +github.com/sigstore/rekor/pkg/verify +github.com/sigstore/cosign/pkg/providers/google +github.com/sigstore/rekor/pkg/tle +github.com/sigstore/rekor/pkg/types/dsse +github.com/sigstore/rekor/pkg/types/hashedrekord +github.com/sigstore/rekor/pkg/types/intoto +github.com/sigstore/rekor/pkg/types/rekord +k8s.io/apimachinery/pkg/runtime/serializer/protobuf +k8s.io/apimachinery/pkg/api/validation +k8s.io/apimachinery/pkg/api/meta/testrestmapper +k8s.io/client-go/util/consistencydetector +k8s.io/apimachinery/pkg/runtime/serializer/json +github.com/sigstore/cosign/pkg/cosign/bundle +github.com/sigstore/cosign/pkg/providers/all +k8s.io/api/authentication/v1beta1 +k8s.io/api/authentication/v1alpha1 github.com/sigstore/cosign/pkg/oci +github.com/sigstore/rekor/pkg/types/dsse/v0.0.1 +k8s.io/client-go/tools/clientcmd/api/latest +k8s.io/apimachinery/pkg/runtime/serializer +k8s.io/api/authorization/v1beta1 github.com/sigstore/rekor/pkg/types/rekord/v0.0.1 +k8s.io/apimachinery/pkg/util/managedfields/internal github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1 -github.com/sigstore/rekor/pkg/types/dsse/v0.0.1 -github.com/sigstore/rekor/pkg/verify -github.com/sigstore/rekor/pkg/client -github.com/sigstore/cosign/internal/pkg/cosign github.com/sigstore/cosign/pkg/oci/internal/signature github.com/sigstore/cosign/pkg/oci/empty +github.com/sigstore/cosign/internal/pkg/cosign github.com/sigstore/rekor/pkg/types/intoto/v0.0.2 github.com/sigstore/rekor/pkg/types/intoto/v0.0.1 -github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/cosign/pkg/oci/signed -k8s.io/client-go/pkg/apis/clientauthentication/v1 -k8s.io/client-go/pkg/apis/clientauthentication/v1beta1 -k8s.io/apimachinery/pkg/runtime/serializer/versioning -k8s.io/apimachinery/pkg/runtime/serializer/cbor -k8s.io/apimachinery/pkg/util/strategicpatch +k8s.io/client-go/plugin/pkg/client/auth/exec +github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/cosign/pkg/oci/layout github.com/sigstore/cosign/pkg/oci/static -k8s.io/apimachinery/pkg/apis/meta/internalversion -k8s.io/api/coordination/v1beta1 -k8s.io/api/coordination/v1alpha2 -github.com/sigstore/cosign/pkg/providers/google +github.com/tink-crypto/tink-go-gcpkms/integration/gcpkms github.com/sigstore/sigstore-go/pkg/tlog -k8s.io/apimachinery/pkg/api/validation -k8s.io/apimachinery/pkg/runtime/serializer/protobuf -k8s.io/apimachinery/pkg/api/meta/testrestmapper -k8s.io/apimachinery/pkg/runtime/serializer/json -k8s.io/client-go/util/consistencydetector -github.com/sigstore/cosign/pkg/oci/mutate github.com/sigstore/cosign/internal/pkg/cosign/payload -k8s.io/api/authentication/v1alpha1 -k8s.io/api/authentication/v1beta1 -k8s.io/apimachinery/pkg/apis/meta/internalversion/validation +github.com/sigstore/cosign/pkg/oci/mutate github.com/sigstore/sigstore-go/pkg/verify -k8s.io/client-go/pkg/apis/clientauthentication/install -k8s.io/client-go/util/watchlist -github.com/sigstore/cosign/pkg/providers/all -k8s.io/apimachinery/pkg/util/managedfields/internal -k8s.io/apimachinery/pkg/runtime/serializer -k8s.io/client-go/tools/clientcmd/api/latest +k8s.io/client-go/rest github.com/sigstore/cosign/pkg/cosign/remote github.com/sigstore/cosign/internal/pkg/cosign/fulcio github.com/sigstore/cosign/pkg/oci/walk github.com/sigstore/cosign/internal/pkg/cosign/tsa -github.com/sigstore/sigstore-go/pkg/bundle -k8s.io/client-go/plugin/pkg/client/auth/exec -github.com/tink-crypto/tink-go-gcpkms/integration/gcpkms -k8s.io/api/authorization/v1beta1 -k8s.io/client-go/rest -github.com/sigstore/cosign/pkg/oci/remote -github.com/sigstore/sigstore/pkg/signature/kms/aws -k8s.io/apimachinery/pkg/util/managedfields github.com/awslabs/amazon-ecr-credential-helper/ecr-login/api -k8s.io/api/admissionregistration/v1alpha1 k8s.io/api/admissionregistration/v1beta1 +k8s.io/api/admissionregistration/v1alpha1 +k8s.io/apimachinery/pkg/util/managedfields github.com/awslabs/amazon-ecr-credential-helper/ecr-login -github.com/sigstore/cosign/pkg/cosign -github.com/sigstore/rekor/pkg/signer -k8s.io/client-go/util/apply +github.com/sigstore/sigstore-go/pkg/bundle +github.com/sigstore/sigstore/pkg/signature/kms/aws +github.com/sigstore/cosign/pkg/oci/remote k8s.io/client-go/openapi -k8s.io/client-go/testing +k8s.io/client-go/util/apply +k8s.io/client-go/plugin/pkg/client/auth/azure k8s.io/client-go/plugin/pkg/client/auth/gcp -k8s.io/client-go/plugin/pkg/client/auth/oidc k8s.io/client-go/tools/auth -k8s.io/client-go/plugin/pkg/client/auth/azure +k8s.io/client-go/plugin/pkg/client/auth/oidc +k8s.io/client-go/testing k8s.io/client-go/tools/clientcmd k8s.io/client-go/plugin/pkg/client/auth +github.com/sigstore/rekor/pkg/signer +github.com/sigstore/cosign/pkg/cosign github.com/sigstore/rekor/pkg/sharding +k8s.io/client-go/gentype github.com/sigstore/cosign/pkg/cosign/git/github github.com/sigstore/cosign/internal/pkg/cosign/rekor -github.com/sigstore/gitsign/internal/cert github.com/sigstore/cosign/pkg/cosign/git/gitlab -github.com/sigstore/cosign/pkg/cosign/git +github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/pkg/rekor +github.com/sigstore/cosign/pkg/cosign/git github.com/sigstore/gitsign/internal/rekor -github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/internal/signature +github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/internal/git -k8s.io/client-go/gentype -k8s.io/api/apps/v1beta1 -k8s.io/api/autoscaling/v2beta2 +k8s.io/api/certificates/v1 +k8s.io/api/node/v1 k8s.io/api/events/v1 -k8s.io/api/networking/v1beta1 +k8s.io/api/discovery/v1beta1 +k8s.io/api/events/v1beta1 +k8s.io/api/node/v1alpha1 k8s.io/api/node/v1beta1 -k8s.io/api/storage/v1beta1 -k8s.io/api/discovery/v1 +k8s.io/client-go/tools/reference +k8s.io/api/scheduling/v1beta1 +k8s.io/api/scheduling/v1 k8s.io/api/batch/v1 -k8s.io/api/resource/v1beta1 -k8s.io/api/scheduling/v1alpha1 k8s.io/api/autoscaling/v1 +k8s.io/api/apps/v1 k8s.io/api/autoscaling/v2 -k8s.io/api/autoscaling/v2beta1 k8s.io/api/certificates/v1beta1 -k8s.io/api/discovery/v1beta1 -k8s.io/api/node/v1 -k8s.io/api/events/v1beta1 -k8s.io/api/scheduling/v1 -k8s.io/api/resource/v1beta2 -k8s.io/api/networking/v1 -k8s.io/api/scheduling/v1beta1 -k8s.io/api/certificates/v1 -k8s.io/client-go/tools/reference -k8s.io/api/apps/v1beta2 -k8s.io/api/apps/v1 -k8s.io/api/storage/v1alpha1 +k8s.io/api/discovery/v1 +k8s.io/api/autoscaling/v2beta2 k8s.io/api/storagemigration/v1alpha1 +k8s.io/api/networking/v1beta1 +k8s.io/api/networking/v1 k8s.io/api/storage/v1 +k8s.io/api/storage/v1beta1 +k8s.io/api/storage/v1alpha1 +k8s.io/api/scheduling/v1alpha1 +k8s.io/api/apps/v1beta1 k8s.io/api/resource/v1alpha3 -k8s.io/api/node/v1alpha1 -k8s.io/api/extensions/v1beta1 +k8s.io/api/autoscaling/v2beta1 +k8s.io/api/apps/v1beta2 +k8s.io/api/resource/v1beta2 +k8s.io/api/resource/v1beta1 k8s.io/api/batch/v1beta1 +k8s.io/api/extensions/v1beta1 k8s.io/client-go/kubernetes/scheme k8s.io/client-go/kubernetes/typed/authentication/v1alpha1 -k8s.io/client-go/discovery -k8s.io/client-go/kubernetes/typed/authentication/v1 k8s.io/client-go/kubernetes/typed/authentication/v1beta1 +k8s.io/client-go/kubernetes/typed/authentication/v1 +k8s.io/client-go/discovery k8s.io/client-go/kubernetes/typed/authorization/v1 k8s.io/client-go/kubernetes/typed/authorization/v1beta1 k8s.io/client-go/applyconfigurations/meta/v1 -k8s.io/client-go/applyconfigurations/admissionregistration/v1 k8s.io/client-go/applyconfigurations/apiserverinternal/v1alpha1 k8s.io/client-go/applyconfigurations/autoscaling/v1 -k8s.io/client-go/applyconfigurations/autoscaling/v2beta2 -k8s.io/client-go/applyconfigurations/certificates/v1alpha1 -k8s.io/client-go/applyconfigurations/certificates/v1beta1 -k8s.io/client-go/applyconfigurations/coordination/v1 -k8s.io/client-go/applyconfigurations/coordination/v1alpha2 +k8s.io/client-go/applyconfigurations/scheduling/v1 k8s.io/client-go/applyconfigurations/coordination/v1beta1 -k8s.io/client-go/applyconfigurations/storagemigration/v1alpha1 +k8s.io/client-go/applyconfigurations/scheduling/v1alpha1 +k8s.io/client-go/applyconfigurations/policy/v1beta1 +k8s.io/client-go/applyconfigurations/coordination/v1alpha2 +k8s.io/client-go/applyconfigurations/certificates/v1alpha1 k8s.io/client-go/applyconfigurations/scheduling/v1beta1 -k8s.io/client-go/applyconfigurations/flowcontrol/v1beta2 -k8s.io/client-go/applyconfigurations/flowcontrol/v1beta1 -k8s.io/client-go/applyconfigurations/flowcontrol/v1beta3 -k8s.io/client-go/applyconfigurations/autoscaling/v2beta1 -k8s.io/client-go/applyconfigurations/flowcontrol/v1 -k8s.io/client-go/applyconfigurations/scheduling/v1 +k8s.io/client-go/applyconfigurations/storagemigration/v1alpha1 k8s.io/client-go/applyconfigurations/networking/v1alpha1 k8s.io/client-go/applyconfigurations/policy/v1 -k8s.io/client-go/applyconfigurations/rbac/v1 -k8s.io/client-go/applyconfigurations/policy/v1beta1 k8s.io/client-go/applyconfigurations/rbac/v1alpha1 -k8s.io/client-go/applyconfigurations/scheduling/v1alpha1 +k8s.io/client-go/applyconfigurations/certificates/v1beta1 k8s.io/client-go/applyconfigurations/autoscaling/v2 +k8s.io/client-go/applyconfigurations/rbac/v1 k8s.io/client-go/applyconfigurations/rbac/v1beta1 +k8s.io/client-go/applyconfigurations/flowcontrol/v1beta1 +k8s.io/client-go/applyconfigurations/autoscaling/v2beta1 +k8s.io/client-go/applyconfigurations/admissionregistration/v1 +k8s.io/client-go/applyconfigurations/coordination/v1 +k8s.io/client-go/applyconfigurations/flowcontrol/v1 k8s.io/client-go/applyconfigurations/certificates/v1 +k8s.io/client-go/applyconfigurations/autoscaling/v2beta2 +k8s.io/client-go/applyconfigurations/flowcontrol/v1beta3 +k8s.io/client-go/applyconfigurations/flowcontrol/v1beta2 k8s.io/client-go/applyconfigurations/core/v1 -k8s.io/client-go/kubernetes/typed/certificates/v1alpha1 -k8s.io/client-go/kubernetes/typed/autoscaling/v1 -k8s.io/client-go/kubernetes/typed/scheduling/v1 -k8s.io/client-go/kubernetes/typed/networking/v1alpha1 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta1 -k8s.io/client-go/kubernetes/typed/policy/v1 -k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1 +k8s.io/client-go/kubernetes/typed/coordination/v1alpha2 k8s.io/client-go/kubernetes/typed/coordination/v1 -k8s.io/client-go/kubernetes/typed/scheduling/v1beta1 -k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta3 -k8s.io/client-go/kubernetes/typed/apiserverinternal/v1alpha1 +k8s.io/client-go/kubernetes/typed/scheduling/v1 k8s.io/client-go/kubernetes/typed/certificates/v1beta1 +k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1 k8s.io/client-go/kubernetes/typed/storagemigration/v1alpha1 -k8s.io/client-go/kubernetes/typed/coordination/v1alpha2 -k8s.io/client-go/kubernetes/typed/rbac/v1 -k8s.io/client-go/kubernetes/typed/certificates/v1 -k8s.io/client-go/kubernetes/typed/autoscaling/v2 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta2 +k8s.io/client-go/kubernetes/typed/apiserverinternal/v1alpha1 +k8s.io/client-go/kubernetes/typed/certificates/v1alpha1 +k8s.io/client-go/kubernetes/typed/autoscaling/v1 k8s.io/client-go/kubernetes/typed/policy/v1beta1 -k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1 +k8s.io/client-go/kubernetes/typed/certificates/v1 k8s.io/client-go/kubernetes/typed/coordination/v1beta1 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1 +k8s.io/client-go/kubernetes/typed/scheduling/v1beta1 +k8s.io/client-go/kubernetes/typed/policy/v1 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta2 +k8s.io/client-go/kubernetes/typed/networking/v1alpha1 +k8s.io/client-go/kubernetes/typed/rbac/v1 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta3 +k8s.io/client-go/kubernetes/typed/autoscaling/v2 k8s.io/client-go/kubernetes/typed/rbac/v1beta1 k8s.io/client-go/kubernetes/typed/rbac/v1alpha1 +k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta1 k8s.io/client-go/kubernetes/typed/admissionregistration/v1 k8s.io/client-go/applyconfigurations/admissionregistration/v1alpha1 k8s.io/client-go/applyconfigurations/admissionregistration/v1beta1 -k8s.io/client-go/kubernetes/typed/admissionregistration/v1alpha1 +k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2 k8s.io/client-go/kubernetes/typed/admissionregistration/v1beta1 -k8s.io/client-go/applyconfigurations/discovery/v1 -k8s.io/client-go/applyconfigurations/batch/v1 +k8s.io/client-go/kubernetes/typed/admissionregistration/v1alpha1 k8s.io/client-go/applyconfigurations/events/v1 k8s.io/client-go/applyconfigurations/events/v1beta1 -k8s.io/client-go/applyconfigurations/node/v1alpha1 k8s.io/client-go/applyconfigurations/node/v1 -k8s.io/client-go/applyconfigurations/node/v1beta1 -k8s.io/client-go/applyconfigurations/networking/v1beta1 +k8s.io/client-go/applyconfigurations/discovery/v1 +k8s.io/client-go/applyconfigurations/discovery/v1beta1 +k8s.io/client-go/applyconfigurations/node/v1alpha1 k8s.io/client-go/kubernetes/typed/core/v1 -k8s.io/client-go/applyconfigurations/apps/v1beta2 -k8s.io/client-go/applyconfigurations/resource/v1beta1 -k8s.io/client-go/applyconfigurations/apps/v1 +k8s.io/client-go/applyconfigurations/networking/v1beta1 +k8s.io/client-go/applyconfigurations/batch/v1 k8s.io/client-go/applyconfigurations/apps/v1beta1 +k8s.io/client-go/applyconfigurations/apps/v1 +k8s.io/client-go/applyconfigurations/storage/v1 +k8s.io/client-go/applyconfigurations/networking/v1 +k8s.io/client-go/applyconfigurations/node/v1beta1 +k8s.io/client-go/applyconfigurations/apps/v1beta2 +k8s.io/client-go/applyconfigurations/storage/v1beta1 k8s.io/client-go/applyconfigurations/storage/v1alpha1 k8s.io/client-go/applyconfigurations/extensions/v1beta1 +k8s.io/client-go/applyconfigurations/resource/v1beta1 k8s.io/client-go/applyconfigurations/resource/v1alpha3 -k8s.io/client-go/applyconfigurations/networking/v1 -k8s.io/client-go/applyconfigurations/discovery/v1beta1 k8s.io/client-go/applyconfigurations/resource/v1beta2 -k8s.io/client-go/applyconfigurations/storage/v1 -k8s.io/client-go/applyconfigurations/storage/v1beta1 k8s.io/client-go/kubernetes/typed/events/v1beta1 -k8s.io/client-go/kubernetes/typed/events/v1 +k8s.io/client-go/kubernetes/typed/node/v1alpha1 k8s.io/client-go/kubernetes/typed/node/v1beta1 -k8s.io/client-go/kubernetes/typed/discovery/v1 k8s.io/client-go/kubernetes/typed/discovery/v1beta1 +k8s.io/client-go/kubernetes/typed/events/v1 +k8s.io/client-go/kubernetes/typed/discovery/v1 k8s.io/client-go/kubernetes/typed/node/v1 -k8s.io/client-go/kubernetes/typed/node/v1alpha1 k8s.io/client-go/kubernetes/typed/storage/v1alpha1 -k8s.io/client-go/kubernetes/typed/networking/v1 +k8s.io/client-go/kubernetes/typed/storage/v1 k8s.io/client-go/kubernetes/typed/networking/v1beta1 -k8s.io/client-go/kubernetes/typed/resource/v1beta1 +k8s.io/client-go/kubernetes/typed/apps/v1beta1 k8s.io/client-go/kubernetes/typed/batch/v1 -k8s.io/client-go/kubernetes/typed/resource/v1alpha3 k8s.io/client-go/applyconfigurations/batch/v1beta1 +k8s.io/client-go/kubernetes/typed/storage/v1beta1 k8s.io/client-go/kubernetes/typed/resource/v1beta2 -k8s.io/client-go/kubernetes/typed/storage/v1 +k8s.io/client-go/kubernetes/typed/networking/v1 +k8s.io/client-go/kubernetes/typed/resource/v1alpha3 k8s.io/client-go/kubernetes/typed/apps/v1 -k8s.io/client-go/kubernetes/typed/apps/v1beta1 k8s.io/client-go/kubernetes/typed/apps/v1beta2 -k8s.io/client-go/kubernetes/typed/storage/v1beta1 k8s.io/client-go/kubernetes/typed/extensions/v1beta1 +k8s.io/client-go/kubernetes/typed/resource/v1beta1 k8s.io/client-go/kubernetes/typed/batch/v1beta1 k8s.io/client-go/kubernetes github.com/sigstore/cosign/pkg/cosign/kubernetes @@ -4564,8 +4600,8 @@ github.com/sigstore/cosign/cmd/cosign/cli/options github.com/sigstore/cosign/cmd/cosign/cli/fulcio github.com/sigstore/cosign/cmd/cosign/cli/rekor -github.com/sigstore/cosign/cmd/cosign/cli/initialize github.com/sigstore/gitsign/internal/gitsign +github.com/sigstore/cosign/cmd/cosign/cli/initialize github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier github.com/sigstore/cosign/cmd/cosign/cli/sign @@ -4577,14 +4613,14 @@ github.com/sigstore/gitsign github.com/sigstore/gitsign/docs/cli dh_auto_test -O--builddirectory=_build -O--buildsystem=golang - cd _build && go test -vet=off -v -p 42 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version + cd _build && go test -vet=off -v -p 40 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version ? github.com/sigstore/gitsign [no test files] ? github.com/sigstore/gitsign/cmd/gitsign-credential-cache [no test files] ? github.com/sigstore/gitsign/docs/cli [no test files] === RUN TestStripUrl --- PASS: TestStripUrl (0.00s) PASS -ok github.com/sigstore/gitsign/internal 0.023s +ok github.com/sigstore/gitsign/internal 0.004s === RUN TestAttestCommitRef === RUN TestAttestCommitRef/base LogEntry ID foo 1 @@ -4592,8 +4628,8 @@ LogEntry ID foo 1 === RUN TestAttestCommitRef/new_commit LogEntry ID foo 1 ---- PASS: TestAttestCommitRef (0.02s) - --- PASS: TestAttestCommitRef/base (0.01s) +--- PASS: TestAttestCommitRef (0.01s) + --- PASS: TestAttestCommitRef/base (0.00s) --- PASS: TestAttestCommitRef/noop (0.00s) --- PASS: TestAttestCommitRef/new_commit (0.00s) === RUN TestAttestTreeRef @@ -4605,23 +4641,23 @@ LogEntry ID foo 1 === RUN TestAttestTreeRef/new_commit_new_tree LogEntry ID foo 1 ---- PASS: TestAttestTreeRef (0.01s) +--- PASS: TestAttestTreeRef (0.00s) --- PASS: TestAttestTreeRef/base (0.00s) --- PASS: TestAttestTreeRef/noop (0.00s) --- PASS: TestAttestTreeRef/new_commit_same_tree (0.00s) --- PASS: TestAttestTreeRef/new_commit_new_tree (0.00s) PASS -ok github.com/sigstore/gitsign/internal/attest 0.140s +ok github.com/sigstore/gitsign/internal/attest 0.046s === RUN TestCache -Get ionos5-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache -Store ionos5-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache -Get ionos5-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Get i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Store i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Get i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache gitsign-credential-cache: found credential! -Get ionos5-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Get i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache gitsign-credential-cache: found credential! ---- PASS: TestCache (2.56s) +--- PASS: TestCache (0.28s) PASS -ok github.com/sigstore/gitsign/internal/cache 2.590s +ok github.com/sigstore/gitsign/internal/cache 0.289s ? github.com/sigstore/gitsign/internal/cache/api [no test files] ? github.com/sigstore/gitsign/internal/cache/service [no test files] ? github.com/sigstore/gitsign/internal/cert [no test files] @@ -4635,26 +4671,26 @@ --- PASS: TestShow/fulcio-cert (0.00s) --- PASS: TestShow/gpg (0.00s) PASS -ok github.com/sigstore/gitsign/internal/commands/show 0.036s +ok github.com/sigstore/gitsign/internal/commands/show 0.014s ? github.com/sigstore/gitsign/internal/commands/verify [no test files] ? github.com/sigstore/gitsign/internal/commands/verify-tag [no test files] ? github.com/sigstore/gitsign/internal/commands/version [no test files] === RUN TestGet --- PASS: TestGet (0.00s) PASS -ok github.com/sigstore/gitsign/internal/config 0.035s +ok github.com/sigstore/gitsign/internal/config 0.013s === RUN TestSign ---- PASS: TestSign (0.01s) +--- PASS: TestSign (0.00s) === RUN TestSignDetached ---- PASS: TestSignDetached (0.01s) +--- PASS: TestSignDetached (0.00s) === RUN TestSignDetachedWithOpenSSL ---- PASS: TestSignDetachedWithOpenSSL (0.03s) +--- PASS: TestSignDetachedWithOpenSSL (0.01s) === RUN TestSignRemoveHeaders --- PASS: TestSignRemoveHeaders (0.00s) === RUN TestAddTimestamps ---- PASS: TestAddTimestamps (0.06s) +--- PASS: TestAddTimestamps (0.02s) === RUN TestTimestampsVerifications ---- PASS: TestTimestampsVerifications (0.68s) +--- PASS: TestTimestampsVerifications (0.34s) === RUN TestVerify --- PASS: TestVerify (0.00s) === RUN TestVerifyGPGSMAttached @@ -4668,11 +4704,11 @@ === RUN TestVerifyOpenSSLDetached --- PASS: TestVerifyOpenSSLDetached (0.00s) === RUN TestVerifyChain ---- PASS: TestVerifyChain (0.06s) +--- PASS: TestVerifyChain (0.02s) === RUN TestVerifyDSAWithSHA1 --- PASS: TestVerifyDSAWithSHA1 (0.00s) PASS -ok github.com/sigstore/gitsign/internal/fork/ietf-cms 6.397s +ok github.com/sigstore/gitsign/internal/fork/ietf-cms 1.788s === RUN TestRequestDo --- PASS: TestRequestDo (0.00s) === RUN TestRequestMatches @@ -4698,33 +4734,33 @@ === RUN TestParseTimestampGlobalSign --- PASS: TestParseTimestampGlobalSign (0.00s) PASS -ok github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp 0.036s +ok github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp 0.013s ? github.com/sigstore/gitsign/internal/fulcio [no test files] === RUN TestNew === RUN TestNew/FromFile === RUN TestNew/Static === RUN TestNew/None ---- PASS: TestNew (1.34s) +--- PASS: TestNew (0.12s) --- PASS: TestNew/FromFile (0.00s) --- PASS: TestNew/Static (0.00s) --- PASS: TestNew/None (0.00s) PASS -ok github.com/sigstore/gitsign/internal/fulcio/fulcioroots 1.372s +ok github.com/sigstore/gitsign/internal/fulcio/fulcioroots 0.131s ? github.com/sigstore/gitsign/internal/git [no test files] ? github.com/sigstore/gitsign/internal/git/gittest [no test files] === RUN TestVerify ---- PASS: TestVerify (0.02s) +--- PASS: TestVerify (0.01s) PASS -ok github.com/sigstore/gitsign/internal/gitsign 0.136s +ok github.com/sigstore/gitsign/internal/gitsign 0.047s ? github.com/sigstore/gitsign/internal/gpg [no test files] ? github.com/sigstore/gitsign/internal/io [no test files] ? github.com/sigstore/gitsign/internal/rekor [no test files] === RUN TestOID ---- PASS: TestOID (0.01s) +--- PASS: TestOID (0.00s) === RUN TestConvert --- PASS: TestConvert (0.00s) PASS -ok github.com/sigstore/gitsign/internal/rekor/oid 0.055s +ok github.com/sigstore/gitsign/internal/rekor/oid 0.023s === RUN TestMatchSAN === RUN TestMatchSAN/email_match === RUN TestMatchSAN/uri_match @@ -4734,7 +4770,7 @@ --- PASS: TestMatchSAN/uri_match (0.00s) --- PASS: TestMatchSAN/no_match (0.00s) PASS -ok github.com/sigstore/gitsign/internal/signature 0.090s +ok github.com/sigstore/gitsign/internal/signature 0.035s ? github.com/sigstore/gitsign/internal/signerverifier [no test files] === RUN TestKeyAlgorithm === RUN TestKeyAlgorithm/ecdsa @@ -4747,7 +4783,7 @@ === RUN TestGetCert --- PASS: TestGetCert (0.00s) PASS -ok github.com/sigstore/gitsign/pkg/fulcio 0.032s +ok github.com/sigstore/gitsign/pkg/fulcio 0.017s === RUN TestObjectHash === RUN TestObjectHash/tag === RUN TestObjectHash/commit @@ -4761,15 +4797,15 @@ === RUN TestSignVerify/detached(false) === RUN TestSignVerify/detached(false)/VerifySignature === RUN TestSignVerify/detached(false)/CertVerifier.Verify ---- PASS: TestSignVerify (0.51s) - --- PASS: TestSignVerify/detached(true) (0.01s) +--- PASS: TestSignVerify (0.20s) + --- PASS: TestSignVerify/detached(true) (0.00s) --- PASS: TestSignVerify/detached(true)/VerifySignature (0.00s) --- PASS: TestSignVerify/detached(true)/CertVerifier.Verify (0.00s) - --- PASS: TestSignVerify/detached(false) (0.01s) + --- PASS: TestSignVerify/detached(false) (0.00s) --- PASS: TestSignVerify/detached(false)/VerifySignature (0.00s) --- PASS: TestSignVerify/detached(false)/CertVerifier.Verify (0.00s) PASS -ok github.com/sigstore/gitsign/pkg/git 0.602s +ok github.com/sigstore/gitsign/pkg/git 0.242s ? github.com/sigstore/gitsign/pkg/gitsign [no test files] ? github.com/sigstore/gitsign/pkg/predicate [no test files] ? github.com/sigstore/gitsign/pkg/rekor [no test files] @@ -4778,7 +4814,7 @@ === RUN TestEnv --- PASS: TestEnv (0.00s) PASS -ok github.com/sigstore/gitsign/pkg/version 0.028s +ok github.com/sigstore/gitsign/pkg/version 0.007s create-stamp debian/debhelper-build-stamp dh_testroot -O--builddirectory=_build -O--buildsystem=golang dh_prep -O--builddirectory=_build -O--buildsystem=golang @@ -4798,13 +4834,13 @@ mkdir -pv /build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/share/man/man1 mkdir: created directory '/build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/share/man' mkdir: created directory '/build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/share/man/man1' -env PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/bin \ +env PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path:/build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/bin \ help2man --version-string="0.13.0-3" \ --no-info --no-discard-stderr \ --name="Keyless Git signing using Sigstore" \ --output /build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/share/man/man1/gitsign.1 \ gitsign -env PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/bin \ +env PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path:/build/reproducible-path/gitsign-0.13.0/debian/tmp/usr/bin \ help2man --version-string="0.13.0-3" \ --no-info --no-discard-stderr \ --name="Gitsign(1) credential caching helper" \ @@ -4829,8 +4865,8 @@ dh_md5sums -O--builddirectory=_build -O--buildsystem=golang dh_builddeb -O--builddirectory=_build -O--buildsystem=golang dpkg-deb: building package 'gitsign' in '../gitsign_0.13.0-3_amd64.deb'. -dpkg-deb: building package 'golang-github-sigstore-gitsign-dev' in '../golang-github-sigstore-gitsign-dev_0.13.0-3_all.deb'. dpkg-deb: building package 'gitsign-dbgsym' in '../gitsign-dbgsym_0.13.0-3_amd64.deb'. +dpkg-deb: building package 'golang-github-sigstore-gitsign-dev' in '../golang-github-sigstore-gitsign-dev_0.13.0-3_all.deb'. dpkg-genbuildinfo --build=binary -O../gitsign_0.13.0-3_amd64.buildinfo dpkg-genchanges --build=binary -O../gitsign_0.13.0-3_amd64.changes dpkg-genchanges: info: binary-only upload (no source code included) @@ -4838,12 +4874,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/1109612/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/2292162 and its subdirectories -I: Current time: Wed Nov 25 06:41:10 -12 2026 -I: pbuilder-time-stamp: 1795632070 +I: removing directory /srv/workspace/pbuilder/1109612 and its subdirectories +I: Current time: Fri Oct 24 02:23:26 +14 2025 +I: pbuilder-time-stamp: 1761222206