Diff of the two buildlogs: -- --- b1/build.log 2025-07-22 09:22:52.420373187 +0000 +++ b2/build.log 2025-07-22 09:27:58.216725749 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Mon Aug 24 03:31:49 -12 2026 -I: pbuilder-time-stamp: 1787585509 +I: Current time: Tue Jul 22 23:22:54 +14 2025 +I: pbuilder-time-stamp: 1753176174 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/trixie-reproducible-base.tgz] I: copying local configuration @@ -24,52 +24,84 @@ dpkg-source: info: applying 0001-Don-t-hard-fail-on-slow-systems.-624.patch I: Not using root during the build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/2097867/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/D01_modify_environment starting +debug: Running on ionos1-amd64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Jul 22 09:23 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='amd64' - DEBIAN_FRONTEND='noninteractive' - DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 ' - DISTRIBUTION='trixie' - HOME='/root' - HOST_ARCH='amd64' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu") + BASH_VERSION='5.2.37(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=amd64 + DEBIAN_FRONTEND=noninteractive + DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=40 ' + DIRSTACK=() + DISTRIBUTION=trixie + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=x86_64 + HOST_ARCH=amd64 IFS=' ' - INVOCATION_ID='95a452cc10494e58a70155da4636a704' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='2097867' - PS1='# ' - PS2='> ' + INVOCATION_ID=46963f762c054cd5bffde52d11dc742f + LANG=C + LANGUAGE=et_EE:et + LC_ALL=C + MACHTYPE=x86_64-pc-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=2647571 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.IfpVusJh/pbuilderrc_sNsz --distribution trixie --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.IfpVusJh/b1 --logfile b1/build.log gitsign_0.13.0-2.dsc' - SUDO_GID='111' - SUDO_UID='106' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://213.165.73.152:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.IfpVusJh/pbuilderrc_TXsj --distribution trixie --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.IfpVusJh/b2 --logfile b2/build.log gitsign_0.13.0-2.dsc' + SUDO_GID=110 + SUDO_UID=105 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://46.16.76.132:3128 I: uname -a - Linux ionos15-amd64 6.12.33+deb12-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.33-1~bpo12+1 (2025-07-09) x86_64 GNU/Linux + Linux i-capture-the-hostname 6.1.0-37-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.140-1 (2025-05-22) x86_64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 May 12 2025 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/2097867/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 May 12 19:25 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -712,7 +744,7 @@ Get: 577 http://deb.debian.org/debian trixie/main amd64 golang-gitlab-gitlab-org-api-client-go-dev all 0.123.0-2 [286 kB] Get: 578 http://deb.debian.org/debian trixie/main amd64 golang-github-sigstore-cosign-dev all 2.5.0-2 [325 kB] Get: 579 http://deb.debian.org/debian trixie/main amd64 help2man amd64 1.49.3 [198 kB] -Fetched 265 MB in 10s (26.0 MB/s) +Fetched 265 MB in 6s (46.5 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19850 files and directories currently installed.) @@ -2568,8 +2600,8 @@ Setting up tzdata (2025b-4) ... Current default time zone: 'Etc/UTC' -Local time is now: Mon Aug 24 15:39:11 UTC 2026. -Universal Time is now: Mon Aug 24 15:39:11 UTC 2026. +Local time is now: Tue Jul 22 09:25:53 UTC 2025. +Universal Time is now: Tue Jul 22 09:25:53 UTC 2025. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ... @@ -3056,7 +3088,11 @@ Building tag database... -> Finished parsing the build-deps I: Building the package -I: Running cd /build/reproducible-path/gitsign-0.13.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../gitsign_0.13.0-2_source.changes +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for trixie +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/gitsign-0.13.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../gitsign_0.13.0-2_source.changes dpkg-buildpackage: info: source package gitsign dpkg-buildpackage: info: source version 0.13.0-2 dpkg-buildpackage: info: source distribution unstable @@ -3074,258 +3110,258 @@ dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang dh_auto_build -O--builddirectory=_build -O--buildsystem=golang - cd _build && go install -trimpath -v -p 42 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version + cd _build && go install -trimpath -v -p 40 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version internal/profilerecord -github.com/aws/aws-sdk-go-v2/internal/sdkio -vendor/golang.org/x/crypto/cryptobyte/asn1 -encoding -internal/byteorder -internal/goos -internal/goarch -cmp -vendor/golang.org/x/crypto/internal/alias -internal/itoa -go.opencensus.io -github.com/ProtonMail/go-crypto/internal/byteutil -golang.org/x/crypto/internal/alias google.golang.org/grpc/serviceconfig +internal/msan +unicode/utf8 +github.com/pjbgf/sha1cd/ubc +go.opencensus.io +internal/unsafeheader github.com/go-git/go-git/plumbing/color +github.com/pjbgf/sha1cd/internal +go.opencensus.io/trace/internal +internal/itoa internal/godebugs -log/internal internal/nettrace -github.com/pjbgf/sha1cd/internal -container/list -unicode/utf8 -internal/unsafeheader -internal/goexperiment +internal/byteorder +google.golang.org/protobuf/internal/flags +vendor/golang.org/x/crypto/cryptobyte/asn1 +encoding internal/asan -internal/msan internal/coverage/rtcov -github.com/awslabs/amazon-ecr-credential-helper/ecr-login/version +github.com/ProtonMail/go-crypto/internal/byteutil +internal/goos golang.org/x/crypto/cryptobyte/asn1 -go.opencensus.io/internal/tagencoding -go.opencensus.io/trace/internal -unicode crypto/internal/fips140/alias +unicode/utf16 +internal/cpu +github.com/aws/aws-sdk-go-v2/internal/sdkio +unicode +vendor/golang.org/x/crypto/internal/alias +internal/goarch +golang.org/x/crypto/internal/alias +github.com/docker/cli/cli/config/types image/color +cmp sync/atomic -google.golang.org/protobuf/internal/flags -crypto/internal/boring/sig -internal/cpu +go.opencensus.io/internal/tagencoding +log/internal +container/list internal/runtime/atomic -internal/runtime/syscall -unicode/utf16 -github.com/pjbgf/sha1cd/ubc +crypto/internal/boring/sig +github.com/awslabs/amazon-ecr-credential-helper/ecr-login/version math/bits -github.com/docker/cli/cli/config/types -github.com/google/go-containerregistry/pkg/v1/types +internal/goexperiment github.com/klauspost/compress/internal/cpuinfo github.com/klauspost/compress/internal/le -internal/runtime/math github.com/google/go-containerregistry/pkg/compression +internal/runtime/syscall github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common -internal/abi -go.mongodb.org/mongo-driver/bson/bsontype go.mongodb.org/mongo-driver/bson/bsonoptions -internal/runtime/sys -github.com/sigstore/rekor/pkg/pki/identity +go.mongodb.org/mongo-driver/bson/bsontype +github.com/google/go-containerregistry/pkg/v1/types golang.org/x/exp/constraints +github.com/sigstore/rekor/pkg/pki/identity log/slog/internal -github.com/sigstore/cosign/pkg/types -crypto/internal/fips140/subtle go.opentelemetry.io/otel/metric/embedded go.opentelemetry.io/otel/trace/embedded -github.com/transparency-dev/merkle github.com/theupdateframework/go-tuf/v0/internal/sets -k8s.io/apimachinery/pkg/selection -k8s.io/apimachinery/pkg/types -github.com/google/go-cmp/cmp/internal/flags -github.com/tink-crypto/tink-go/internal crypto/internal/fips140deps/byteorder +github.com/sigstore/cosign/pkg/types +crypto/internal/fips140/subtle +github.com/transparency-dev/merkle internal/chacha8rand +internal/runtime/math +internal/abi +internal/runtime/sys +github.com/pelletier/go-toml/v2/internal/characters +k8s.io/apimachinery/pkg/selection +github.com/google/go-cmp/cmp/internal/flags github.com/tink-crypto/tink-go/key github.com/tink-crypto/tink-go/internal/internalapi github.com/aws/aws-sdk-go/aws/client/metadata +k8s.io/apimachinery/pkg/types github.com/googleapis/gax-go/v2/internal -github.com/golang/groupcache/lru -github.com/pelletier/go-toml/v2/internal/characters +github.com/tink-crypto/tink-go/internal google.golang.org/protobuf/internal/set golang.org/x/crypto/salsa20/salsa golang.org/x/exp/slices -internal/runtime/exithook +github.com/golang/groupcache/lru crypto/internal/fips140deps/cpu internal/bytealg math +internal/runtime/exithook internal/stringslite internal/race internal/sync internal/runtime/maps -go.opentelemetry.io/otel/internal github.com/aws/aws-sdk-go/internal/sdkmath +go.opentelemetry.io/otel/internal github.com/klauspost/compress runtime -internal/reflectlite +k8s.io/klog/internal/dbg +weak iter -sync crypto/subtle -weak -k8s.io/klog/internal/dbg +internal/reflectlite +sync maps slices errors sort -internal/oserror -path -math/rand/v2 -vendor/golang.org/x/net/dns/dnsmessage -github.com/sassoftware/relic/signers/sigerrors -golang.org/x/crypto/cast5 -github.com/hashicorp/hcl/hcl/strconv -strconv +google.golang.org/protobuf/internal/pragma +unique +log/slog/internal/buffer internal/bisect +github.com/sigstore/cosign/cmd/cosign/cli/sign/privacy +go.uber.org/zap/internal/pool internal/testlog +github.com/aws/aws-sdk-go/internal/sync/singleflight internal/singleflight -unique -google.golang.org/protobuf/internal/pragma -google.golang.org/grpc/internal/buffer -syscall -io github.com/josharian/intern -go.uber.org/zap/internal/pool -log/slog/internal/buffer github.com/spf13/viper/internal/encoding -github.com/sigstore/cosign/cmd/cosign/cli/sign/privacy -github.com/aws/aws-sdk-go/internal/sync/singleflight runtime/cgo -github.com/google/go-containerregistry/internal/and -strings -hash -go.step.sm/crypto/internal/utils/utfbom +internal/oserror +path +io +google.golang.org/grpc/internal/buffer +github.com/sassoftware/relic/signers/sigerrors +vendor/golang.org/x/net/dns/dnsmessage +math/rand/v2 +github.com/hashicorp/hcl/hcl/strconv +golang.org/x/crypto/cast5 +strconv internal/godebug +hash crypto/internal/randutil -container/heap -github.com/gogo/protobuf/sortkeys -github.com/aws/aws-sdk-go/internal/sdkio -k8s.io/apimachinery/pkg/util/sets +strings github.com/cloudflare/circl/internal/sha3 -bytes internal/saferio -golang.org/x/mod/semver -github.com/aws/smithy-go/transport/http/internal/io +bytes +syscall +github.com/google/go-containerregistry/internal/and +hash/fnv +go.step.sm/crypto/internal/utils/utfbom +github.com/aws/aws-sdk-go/internal/sdkio hash/crc32 +github.com/aws/smithy-go/transport/http/internal/io +container/heap hash/adler32 -hash/fnv -reflect +golang.org/x/mod/semver +github.com/gogo/protobuf/sortkeys +k8s.io/apimachinery/pkg/util/sets +crypto/internal/fips140deps/godebug +math/rand crypto -golang.org/x/crypto/blowfish -net/netip golang.org/x/crypto/openpgp/errors -encoding/base32 github.com/x448/float16 -github.com/cloudflare/circl/sign -golang.org/x/crypto/openpgp/s2k -crypto/internal/fips140deps/godebug -math/rand +golang.org/x/crypto/blowfish +encoding/base32 +net/netip +reflect vendor/golang.org/x/text/transform github.com/syndtr/goleveldb/leveldb/comparer -github.com/aws/smithy-go/io golang.org/x/text/transform -crypto/internal/fips140 -bufio +github.com/aws/smithy-go/io +github.com/cloudflare/circl/sign +golang.org/x/crypto/openpgp/s2k +google.golang.org/grpc/internal/grpcrand crypto/internal/impl net/http/internal/ascii -regexp/syntax +crypto/internal/fips140 github.com/aws/aws-sdk-go-v2/internal/strings +k8s.io/klog/internal/severity github.com/theupdateframework/go-tuf/v0/internal/roles net/http/internal/testcert -go/build/constraint -github.com/munnerz/goautoneg html +go/build/constraint github.com/aws/aws-sdk-go/internal/strings github.com/aws/aws-sdk-go/internal/sdkuri +github.com/munnerz/goautoneg +regexp/syntax go.step.sm/crypto/internal/emoji -k8s.io/klog/internal/severity -internal/syscall/unix -internal/syscall/execenv -time -crypto/internal/fips140/sha3 -crypto/internal/fips140/sha512 +bufio +golang.org/x/text/runes crypto/tls/internal/fips140tls +crypto/internal/fips140/sha512 crypto/internal/fips140/sha256 -golang.org/x/text/runes -google.golang.org/grpc/internal/grpcrand +crypto/internal/fips140/sha3 compress/bzip2 image -crypto/internal/fips140/hmac crypto/sha3 +crypto/internal/fips140/hmac crypto/internal/fips140/check crypto/internal/fips140hash crypto/internal/fips140/edwards25519/field crypto/internal/fips140/aes crypto/internal/fips140/hkdf -crypto/internal/fips140/tls12 crypto/internal/fips140/bigmod crypto/internal/fips140/nistec/fiat +crypto/internal/fips140/tls12 crypto/internal/fips140/tls13 -image/internal/imageutil regexp +image/internal/imageutil +internal/syscall/execenv +time +internal/syscall/unix crypto/internal/fips140/edwards25519 image/jpeg -internal/poll -io/fs -context +github.com/go-git/go-git/internal/url +google.golang.org/api/internal/third_party/uritemplates +k8s.io/apimachinery/pkg/version google.golang.org/grpc/backoff google.golang.org/grpc/keepalive -github.com/aws/smithy-go/ptr +github.com/google/go-containerregistry/internal/retry/wait +context github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2 -github.com/aws/aws-sdk-go/internal/sdkrand github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1 +io/fs github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1 -k8s.io/klog/internal/clock go.uber.org/zap/buffer -github.com/google/go-containerregistry/internal/retry/wait +github.com/aws/smithy-go/ptr k8s.io/utils/clock github.com/jonboulle/clockwork github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/common +k8s.io/klog/internal/clock +github.com/aws/aws-sdk-go/internal/sdkrand +github.com/aws/aws-sdk-go-v2/internal/timeconv github.com/google/go-cmp/cmp/internal/diff github.com/sigstore/gitsign/pkg/predicate -github.com/aws/aws-sdk-go-v2/internal/timeconv -k8s.io/apimachinery/pkg/version -github.com/go-git/go-git/internal/url -google.golang.org/api/internal/third_party/uritemplates -go.uber.org/zap/internal/bufferpool +internal/poll k8s.io/utils/clock/testing -github.com/spf13/afero/internal/common -embed -internal/filepathlite -golang.org/x/net/context +go.uber.org/zap/internal/bufferpool +crypto/internal/fips140/nistec +go.uber.org/zap/internal/stacktrace +google.golang.org/grpc/internal/backoff google.golang.org/grpc/internal/grpcsync +golang.org/x/net/context +github.com/aws/smithy-go/context github.com/aws/aws-sdk-go-v2/internal/sdk go.opentelemetry.io/otel/internal/baggage -github.com/aws/smithy-go/context github.com/tink-crypto/tink-go/tink -google.golang.org/grpc/internal/backoff -go.uber.org/zap/internal/stacktrace +github.com/spf13/afero/internal/common github.com/jbenet/go-context/io +internal/filepathlite +embed github.com/go-git/go-git/utils/ioutil google.golang.org/protobuf/internal/editiondefaults -crypto/internal/fips140/nistec os +internal/fmtsort go.opentelemetry.io/otel/internal/attribute +github.com/google/go-cmp/cmp/internal/function encoding/binary -github.com/modern-go/reflect2 sigs.k8s.io/structured-merge-diff/schema -github.com/google/go-cmp/cmp/internal/function -internal/fmtsort +github.com/modern-go/reflect2 +encoding/base64 vendor/golang.org/x/crypto/internal/poly1305 golang.org/x/crypto/internal/poly1305 github.com/cespare/xxhash -github.com/klauspost/compress/internal/snapref -github.com/golang/snappy github.com/google/gofuzz/bytesource -encoding/base64 github.com/tink-crypto/tink-go/internal/outputprefix +github.com/golang/snappy filippo.io/edwards25519/field +github.com/klauspost/compress/internal/snapref golang.org/x/sys/unix encoding/pem golang.org/x/crypto/openpgp/armor @@ -3334,1174 +3370,1174 @@ crypto/internal/sysrand io/ioutil path/filepath -vendor/golang.org/x/sys/cpu -google.golang.org/protobuf/internal/detrand -fmt github.com/go-git/go-billy/v5 -golang.org/x/sys/cpu -internal/sysinfo google.golang.org/grpc/internal/envconfig go.uber.org/zap/internal/exit +internal/sysinfo k8s.io/klog/internal/buffer +google.golang.org/protobuf/internal/detrand internal/lazyregexp +fmt os/signal +golang.org/x/sys/cpu +vendor/golang.org/x/sys/cpu net crypto/internal/entropy crypto/internal/fips140/drbg -golang.org/x/crypto/sha3 golang.org/x/crypto/blake2b -crypto/internal/fips140only -crypto/internal/fips140/ed25519 -crypto/internal/fips140/mlkem -crypto/internal/fips140/rsa -crypto/internal/fips140/aes/gcm -os/exec +golang.org/x/crypto/sha3 github.com/go-git/go-billy/v5/helper/polyfill -github.com/go-git/go-billy/v5/util github.com/shibumi/go-pathspec -github.com/spf13/afero/mem k8s.io/client-go/util/homedir +github.com/go-git/go-billy/v5/util +os/exec +github.com/spf13/afero/mem +crypto/internal/fips140only crypto/internal/fips140/ecdh +crypto/internal/fips140/ed25519 crypto/internal/fips140/ecdsa -crypto/rc4 +crypto/internal/fips140/aes/gcm +crypto/internal/fips140/mlkem +crypto/internal/fips140/rsa crypto/md5 +crypto/rc4 github.com/go-git/go-billy/v5/helper/chroot golang.org/x/crypto/argon2 +crypto/cipher github.com/mitchellh/go-homedir github.com/skratchdot/open-golang/open -crypto/cipher +golang.org/x/crypto/chacha20 +github.com/ProtonMail/go-crypto/eax +vendor/golang.org/x/crypto/chacha20 +crypto/internal/boring +crypto/des +crypto/aes +crypto/ecdh +crypto/sha512 +crypto/hmac +crypto/sha256 +crypto/sha1 +github.com/ProtonMail/go-crypto/openpgp/aes/keywrap +github.com/transparency-dev/merkle/rfc6962 +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +go.step.sm/crypto/internal/bcrypt_pbkdf +golang.org/x/crypto/pbkdf2 +golang.org/x/crypto/hkdf github.com/sigstore/cosign/pkg/providers github.com/sigstore/cosign/pkg/cosign/env +compress/flate encoding/json encoding/hex log net/url +vendor/golang.org/x/net/http2/hpack +vendor/golang.org/x/crypto/chacha20poly1305 +mime math/big -vendor/golang.org/x/text/unicode/norm mime/quotedprintable net/http/internal -vendor/golang.org/x/net/http2/hpack -mime +vendor/golang.org/x/text/unicode/norm os/user text/template/parse text/tabwriter google.golang.org/grpc/internal/grpclog +google.golang.org/grpc/attributes google.golang.org/protobuf/internal/errors +go/token google.golang.org/protobuf/internal/version google.golang.org/grpc/internal/idle +go.opencensus.io/internal go.opencensus.io/trace/tracestate golang.org/x/net/http2/hpack -go.opencensus.io/internal -google.golang.org/grpc/attributes runtime/trace +golang.org/x/text/unicode/norm go.opencensus.io/resource -compress/flate -github.com/zeebo/errs github.com/go-jose/go-jose/json +github.com/zeebo/errs dario.cat/mergo github.com/ProtonMail/go-crypto/openpgp/errors -go/token -github.com/pjbgf/sha1cd github.com/src-d/gcfg/token +github.com/pjbgf/sha1cd github.com/src-d/gcfg/types gopkg.in/warnings.v0 +encoding/gob +github.com/sigstore/cosign/pkg/providers/envvar +github.com/sigstore/cosign/pkg/providers/filesystem +github.com/ProtonMail/go-crypto/ocb github.com/go-git/go-git/internal/revision github.com/go-git/go-git/plumbing/filemode -golang.org/x/text/unicode/norm -encoding/gob github.com/emirpasic/gods/utils -github.com/sigstore/cosign/pkg/providers/filesystem -github.com/sigstore/cosign/pkg/providers/envvar github.com/go-git/go-git/utils/merkletrie/noder github.com/go-git/go-git/plumbing/protocol/packp/capability -google.golang.org/protobuf/encoding/protowire golang.org/x/sys/execabs +golang.org/x/crypto/curve25519 runtime/debug -github.com/aws/smithy-go -crypto/internal/boring -vendor/golang.org/x/crypto/chacha20 -crypto/des -github.com/ProtonMail/go-crypto/eax -github.com/ProtonMail/go-crypto/ocb -golang.org/x/crypto/chacha20 -github.com/src-d/gcfg/scanner github.com/aws/aws-sdk-go-v2/feature/ec2/imds/internal/config -go.opencensus.io/metric/metricdata +google.golang.org/protobuf/encoding/protowire github.com/aws/smithy-go/encoding github.com/ProtonMail/go-crypto/openpgp/armor github.com/aws/aws-sdk-go-v2/aws/ratelimit +github.com/aws/smithy-go +go.opencensus.io/metric/metricdata encoding/xml -github.com/emirpasic/gods/containers github.com/aws/aws-sdk-go-v2/internal/ini +golang.org/x/net/internal/timeseries +golang.org/x/text/unicode/bidi +github.com/spiffe/go-spiffe/v2/logger +github.com/src-d/gcfg/scanner +vendor/golang.org/x/text/unicode/bidi +github.com/emirpasic/gods/containers github.com/go-git/go-git/utils/merkletrie/internal/frame +github.com/go-git/go-git/utils/trace +github.com/aws/smithy-go/logging github.com/pkg/errors github.com/opencontainers/go-digest +google.golang.org/protobuf/reflect/protoreflect +go.opencensus.io/metric/metricproducer +github.com/google/go-containerregistry/pkg/logs github.com/google/go-containerregistry/internal/retry -github.com/aws/smithy-go/auth -github.com/opencontainers/image-spec/specs-go github.com/klauspost/compress/fse -google.golang.org/protobuf/reflect/protoreflect +github.com/opencontainers/image-spec/specs-go github.com/containerd/stargz-snapshotter/estargz/errorutil -github.com/go-git/go-git/plumbing/hash -go.opencensus.io/metric/metricproducer -github.com/go-git/go-git/utils/merkletrie golang.org/x/sync/errgroup flag -crypto/aes -crypto/ecdh -crypto/sha512 -crypto/hmac -crypto/sha256 +github.com/aws/smithy-go/auth +github.com/ProtonMail/go-crypto/openpgp/internal/algorithm github.com/emirpasic/gods/lists -crypto/sha1 -golang.org/x/net/internal/timeseries -vendor/golang.org/x/text/unicode/bidi -golang.org/x/text/unicode/bidi -github.com/go-git/go-git/plumbing -github.com/spiffe/go-spiffe/v2/logger +github.com/go-git/go-git/plumbing/hash github.com/emirpasic/gods/trees -github.com/go-git/go-git/utils/trace -github.com/aws/smithy-go/logging -github.com/google/go-containerregistry/pkg/logs -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +github.com/go-git/go-git/utils/merkletrie encoding/csv -github.com/ProtonMail/go-crypto/openpgp/aes/keywrap -github.com/ProtonMail/go-crypto/openpgp/internal/algorithm -vendor/golang.org/x/crypto/chacha20poly1305 -github.com/opencontainers/image-spec/specs-go/v1 database/sql/driver -golang.org/x/crypto/pbkdf2 -golang.org/x/crypto/hkdf -golang.org/x/crypto/scrypt gopkg.in/yaml.v3 -github.com/nozzle/throttler +github.com/go-openapi/analysis/internal/debug github.com/go-git/go-git/plumbing/format/pktline github.com/aws/smithy-go/middleware +github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer go.uber.org/zap/internal/color +golang.org/x/crypto/scrypt +github.com/go-git/go-git/plumbing +github.com/nozzle/throttler github.com/sigstore/cosign/internal/pkg/oci/remote -github.com/aws/aws-sdk-go-v2/internal/sync/singleflight -github.com/aws/smithy-go/internal/sync/singleflight -github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer -github.com/go-openapi/analysis/internal/debug -github.com/ProtonMail/go-crypto/openpgp/s2k github.com/sigstore/cosign/internal/ui -github.com/sigstore/sigstore-go/pkg/util -golang.org/x/crypto/curve25519 github.com/spiffe/go-spiffe/v2/spiffeid -github.com/sergi/go-diff/diffmatchpatch github.com/google/go-containerregistry/internal/redact -github.com/go-openapi/jsonreference/internal -github.com/go-git/go-git/plumbing/protocol/packp/sideband -github.com/spf13/jwalterweatherman +github.com/opencontainers/image-spec/specs-go/v1 github.com/subosito/gotenv +github.com/go-git/go-git/plumbing/protocol/packp/sideband +github.com/go-openapi/jsonreference/internal github.com/hashicorp/hcl/hcl/token +github.com/ProtonMail/go-crypto/openpgp/s2k +gopkg.in/ini.v1 +github.com/aws/aws-sdk-go-v2/internal/sync/singleflight +github.com/sergi/go-diff/diffmatchpatch +github.com/aws/smithy-go/internal/sync/singleflight +github.com/spf13/jwalterweatherman +github.com/sigstore/sigstore-go/pkg/util github.com/pelletier/go-toml/v2/internal/danger github.com/go-openapi/runtime/logger github.com/opentracing/opentracing-go/log go.opentelemetry.io/otel/baggage +github.com/oklog/ulid github.com/transparency-dev/merkle/compact -github.com/go-git/go-git/plumbing/cache -github.com/go-git/go-git/utils/binary -github.com/go-git/go-git/plumbing/format/diff -github.com/go-git/go-git/utils/merkletrie/filesystem +compress/gzip +compress/zlib +github.com/sigstore/cosign/internal/pkg/now github.com/hashicorp/hcl/hcl/ast +github.com/klauspost/compress/huff0 github.com/hashicorp/hcl/hcl/scanner github.com/hashicorp/hcl/json/token -github.com/pelletier/go-toml/v2/unstable -github.com/go-git/go-git/plumbing/format/index -gopkg.in/ini.v1 -github.com/transparency-dev/merkle/proof -github.com/transparency-dev/merkle/rfc6962 -github.com/sigstore/cosign/internal/pkg/now github.com/theupdateframework/go-tuf/v0/internal/fsutil -github.com/go-git/go-git/plumbing/format/idxfile github.com/syndtr/goleveldb/leveldb/util -github.com/hashicorp/hcl/json/scanner -github.com/klauspost/compress/huff0 +vendor/golang.org/x/text/secure/bidirule github.com/syndtr/goleveldb/leveldb/storage github.com/google/go-querystring/query golang.org/x/time/rate +github.com/pelletier/go-toml/v2/unstable github.com/google/gofuzz +github.com/go-git/go-git/plumbing/cache +golang.org/x/text/secure/bidirule +github.com/go-git/go-git/utils/binary +github.com/go-git/go-git/plumbing/format/diff +github.com/go-git/go-git/utils/merkletrie/filesystem +testing k8s.io/apimachinery/third_party/forked/golang/reflect +github.com/transparency-dev/merkle/proof k8s.io/apimachinery/pkg/fields -k8s.io/apimachinery/pkg/util/errors -compress/gzip -compress/zlib +github.com/go-git/go-git/utils/sync +github.com/hashicorp/hcl/json/scanner go/scanner +k8s.io/apimachinery/pkg/util/errors go/doc/comment k8s.io/apimachinery/pkg/conversion/queryparams k8s.io/apimachinery/pkg/util/naming +github.com/go-git/go-git/plumbing/format/index +github.com/go-git/go-git/plumbing/format/idxfile github.com/hashicorp/hcl/hcl/parser +runtime/pprof +text/template +github.com/google/go-containerregistry/internal/gzip +internal/profile github.com/modern-go/concurrent -sigs.k8s.io/yaml/goyaml.v2 -github.com/hashicorp/hcl/json/parser -github.com/go-git/go-git/utils/sync -k8s.io/apimachinery/pkg/util/validation/field github.com/syndtr/goleveldb/leveldb/cache -golang.org/x/text/secure/bidirule -github.com/google/go-containerregistry/internal/gzip github.com/syndtr/goleveldb/leveldb/filter -runtime/pprof -internal/profile -github.com/go-git/go-git/utils/diff -github.com/pelletier/go-toml/v2/internal/tracker +sigs.k8s.io/yaml/goyaml.v2 +github.com/hashicorp/hcl/json/parser k8s.io/utils/ptr +k8s.io/apimachinery/pkg/util/validation/field +github.com/aws/aws-sdk-go-v2/internal/context k8s.io/apimachinery/pkg/util/version -k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json -github.com/oklog/ulid k8s.io/client-go/pkg/version -github.com/cyphar/filepath-securejoin -vendor/golang.org/x/text/secure/bidirule -github.com/fsnotify/fsnotify/internal -golang.org/x/term +github.com/davecgh/go-spew/spew +k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json +github.com/pelletier/go-toml/v2/internal/tracker +github.com/hashicorp/hcl/hcl/printer +github.com/go-git/go-git/utils/diff +k8s.io/apimachinery/pkg/conversion k8s.io/client-go/tools/metrics -text/template +github.com/aws/aws-sdk-go-v2/internal/middleware k8s.io/client-go/util/flowcontrol -testing -github.com/davecgh/go-spew/spew k8s.io/kube-openapi/pkg/cached github.com/emicklei/go-restful/log -google.golang.org/protobuf/internal/encoding/messageset -google.golang.org/protobuf/internal/order -google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/internal/strs -google.golang.org/protobuf/runtime/protoiface -google.golang.org/protobuf/internal/descfmt -google.golang.org/protobuf/internal/descopts +go/ast github.com/go-git/go-git/plumbing/storer github.com/go-git/go-git/utils/merkletrie/index -github.com/hashicorp/hcl -github.com/hashicorp/hcl/hcl/printer -github.com/syndtr/goleveldb/leveldb/opt -github.com/aws/aws-sdk-go-v2/internal/context -golang.org/x/net/idna -go/ast k8s.io/apimachinery/third_party/forked/golang/json +github.com/cyphar/filepath-securejoin +golang.org/x/term +vendor/golang.org/x/net/idna +github.com/fsnotify/fsnotify/internal +github.com/syndtr/goleveldb/leveldb/opt github.com/google/go-cmp/cmp/internal/value -k8s.io/apimachinery/pkg/conversion github.com/syndtr/goleveldb/leveldb/errors -github.com/common-nighthawk/go-figure -google.golang.org/protobuf/reflect/protoregistry -google.golang.org/protobuf/internal/encoding/json github.com/go-jose/go-jose/v3/json -google.golang.org/protobuf/internal/encoding/text -github.com/fsnotify/fsnotify -google.golang.org/protobuf/internal/protolazy gopkg.in/square/go-jose.v2/json -github.com/aws/aws-sdk-go-v2/internal/middleware -github.com/syndtr/goleveldb/leveldb/iterator -github.com/go-git/go-git/plumbing/format/packfile -github.com/syndtr/goleveldb/leveldb/journal +github.com/common-nighthawk/go-figure github.com/sigstore/gitsign/internal/config github.com/google/trillian/types/internal/tls -github.com/aws/aws-sdk-go/aws/awserr +github.com/go-git/go-git/plumbing/format/packfile +google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/genid +google.golang.org/protobuf/internal/order +google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/runtime/protoiface +google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts +github.com/hashicorp/hcl +github.com/syndtr/goleveldb/leveldb/iterator +github.com/syndtr/goleveldb/leveldb/journal +github.com/aws/aws-sdk-go-v2/aws/protocol/xml +github.com/fsnotify/fsnotify golang.org/x/sync/singleflight github.com/google/go-cmp/cmp -github.com/googleapis/gax-go/v2/callctx -go.step.sm/crypto/internal/bcrypt_pbkdf -go.step.sm/crypto/internal/utils -go.step.sm/crypto/fingerprint -github.com/sigstore/gitsign/pkg/version -github.com/mattn/go-tty -github.com/russross/blackfriday/v2 -vendor/golang.org/x/net/idna -github.com/aws/aws-sdk-go-v2/aws/middleware/private/metrics +google.golang.org/protobuf/reflect/protoregistry +google.golang.org/protobuf/internal/protolazy google.golang.org/grpc/grpclog +google.golang.org/protobuf/internal/encoding/text +google.golang.org/protobuf/internal/encoding/json github.com/emirpasic/gods/lists/arraylist +github.com/aws/aws-sdk-go-v2/aws/middleware/private/metrics github.com/aws/aws-sdk-go-v2/aws/protocol/restjson +github.com/jmespath/go-jmespath github.com/sirupsen/logrus github.com/docker/docker-credential-helpers/credentials +github.com/google/go-containerregistry/pkg/v1 github.com/secure-systems-lab/go-securesystemslib/cjson -github.com/jmespath/go-jmespath -github.com/blang/semver github.com/mailru/easyjson/jlexer -github.com/google/go-containerregistry/pkg/v1 -github.com/go-git/go-billy/v5/osfs +github.com/blang/semver go.uber.org/atomic -github.com/aws/aws-sdk-go-v2/aws/protocol/xml -google.golang.org/protobuf/proto log/slog -github.com/emirpasic/gods/trees/binaryheap -github.com/spf13/viper/internal/encoding/hcl github.com/spf13/viper/internal/encoding/json +github.com/emirpasic/gods/trees/binaryheap github.com/pelletier/go-toml/v2 go.opentelemetry.io/otel/attribute +golang.org/x/net/idna go.opentelemetry.io/otel/codes -github.com/docker/docker-credential-helpers/client -github.com/syndtr/goleveldb/leveldb/memdb -github.com/syndtr/goleveldb/leveldb/table github.com/theupdateframework/go-tuf/v0/data -sigs.k8s.io/json/internal/golang/encoding/json -google.golang.org/protobuf/internal/encoding/defval -github.com/gogo/protobuf/proto -k8s.io/apimachinery/pkg/util/framer -github.com/evanphx/json-patch/v5 -github.com/jellydator/ttlcache -google.golang.org/grpc/connectivity -go.uber.org/multierr -k8s.io/apimachinery/pkg/util/dump -github.com/aws/aws-sdk-go/internal/ini -github.com/docker/cli/cli/config/credentials -github.com/theupdateframework/go-tuf/v0/util -github.com/sigstore/gitsign/internal/cache/api -github.com/sigstore/gitsign/internal/io -github.com/aws/aws-sdk-go/aws/endpoints -go.opencensus.io/tag -github.com/google/go-containerregistry/internal/verify -github.com/google/go-containerregistry/pkg/v1/static -github.com/google/go-containerregistry/pkg/v1/match -github.com/go-git/go-git/plumbing/format/objfile -github.com/google/go-containerregistry/pkg/v1/stream -github.com/go-git/go-git/internal/path_util -github.com/kevinburke/ssh_config -github.com/aws/aws-sdk-go-v2/internal/shareddefaults -github.com/docker/docker/pkg/homedir -github.com/vbatts/tar-split/archive/tar -github.com/aws/aws-sdk-go/internal/shareddefaults -go.uber.org/zap/zapcore -archive/tar -go.opentelemetry.io/otel/trace -go.opentelemetry.io/otel/semconv/v1.17.0 -go.opentelemetry.io/otel/metric -github.com/sigstore/sigstore/pkg/oauth -html/template -github.com/aws/aws-sdk-go/aws/awsutil -github.com/awslabs/amazon-ecr-credential-helper/ecr-login/config -github.com/docker/cli/cli/config/configfile -github.com/cpuguy83/go-md2man/v2/md2man +github.com/spf13/viper/internal/encoding/hcl crypto/rand crypto/elliptic crypto/internal/boring/bbig +encoding/asn1 crypto/dsa -go.opencensus.io/stats/internal +google.golang.org/grpc/connectivity github.com/ProtonMail/go-crypto/openpgp/internal/encoding +github.com/go-git/go-billy/v5/osfs github.com/aws/smithy-go/time github.com/aws/smithy-go/document -encoding/asn1 -github.com/aws/smithy-go/encoding/json -github.com/aws/smithy-go/encoding/xml -github.com/google/certificate-transparency-go/asn1 -github.com/dustin/go-humanize -github.com/syndtr/goleveldb/leveldb -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext -go.opencensus.io/stats -github.com/go-logr/logr -k8s.io/klog/internal/sloghandler +google.golang.org/protobuf/proto crypto/ed25519 crypto/internal/hpke crypto/rsa -go.opencensus.io/trace github.com/cloudflare/circl/math +go.opencensus.io/trace github.com/ProtonMail/go-crypto/openpgp/elgamal +google.golang.org/protobuf/internal/encoding/defval github.com/aws/aws-sdk-go-v2/internal/rand github.com/aws/smithy-go/rand +github.com/aws/smithy-go/encoding/json +github.com/aws/smithy-go/encoding/xml +github.com/docker/docker-credential-helpers/client +github.com/google/go-containerregistry/internal/verify github.com/aws/aws-sdk-go-v2/service/sso/types github.com/aws/aws-sdk-go-v2/service/ssooidc/types github.com/aws/aws-sdk-go-v2/service/sts/types github.com/aws/aws-sdk-go-v2/service/ecr/types github.com/aws/aws-sdk-go-v2/service/ecrpublic/types -github.com/klauspost/compress/zstd -go.opencensus.io/stats/view +github.com/aws/smithy-go/waiter +github.com/google/go-containerregistry/pkg/v1/match +github.com/google/go-containerregistry/pkg/v1/stream go.mongodb.org/mongo-driver/bson/primitive +go.uber.org/multierr +github.com/klauspost/compress/zstd +github.com/src-d/gcfg +github.com/docker/cli/cli/config/credentials golang.org/x/crypto/ed25519 -github.com/aws/smithy-go/waiter github.com/secure-systems-lab/go-securesystemslib/encrypted golang.org/x/crypto/openpgp/elgamal -golang.org/x/mod/sumdb/note +github.com/google/certificate-transparency-go/asn1 +go.uber.org/zap/zapcore +github.com/dustin/go-humanize +github.com/google/go-containerregistry/pkg/v1/static +go.opencensus.io/tag github.com/jedisct1/go-minisign -github.com/spf13/viper/internal/encoding/toml +html/template +golang.org/x/mod/sumdb/note +go.opentelemetry.io/otel/metric +go.opentelemetry.io/otel/trace +github.com/go-git/go-git/plumbing/format/objfile +github.com/ProtonMail/go-crypto/bitcurves +golang.org/x/oauth2/jws +github.com/ProtonMail/go-crypto/brainpool +github.com/sigstore/sigstore/pkg/signature/options +go.opentelemetry.io/otel/semconv/v1.17.0 +go.mongodb.org/mongo-driver/x/bsonx/bsoncore +github.com/theupdateframework/go-tuf/v0/util +github.com/syndtr/goleveldb/leveldb/memdb +github.com/syndtr/goleveldb/leveldb/table golang.org/x/crypto/nacl/box +github.com/go-git/go-git/internal/path_util +github.com/kevinburke/ssh_config +github.com/aws/aws-sdk-go-v2/internal/shareddefaults +github.com/docker/docker/pkg/homedir +archive/tar +github.com/awslabs/amazon-ecr-credential-helper/ecr-login/config +github.com/docker/cli/cli/config/configfile +github.com/vbatts/tar-split/archive/tar gopkg.in/inf.v0 +github.com/gogo/protobuf/proto github.com/fxamacker/cbor +sigs.k8s.io/json/internal/golang/encoding/json +github.com/sigstore/cosign/internal/pkg/cosign/payload/size +k8s.io/apimachinery/pkg/util/framer +k8s.io/apimachinery/pkg/util/dump +github.com/evanphx/json-patch/v5 +github.com/segmentio/ksuid +github.com/json-iterator/go +github.com/sigstore/sigstore/pkg/oauth +go.opencensus.io/stats/internal +github.com/tink-crypto/tink-go/subtle/random +google.golang.org/protobuf/encoding/prototext +google.golang.org/protobuf/internal/filedesc +github.com/tink-crypto/tink-go/subtle +github.com/go-git/go-git/plumbing/format/config +github.com/jellydator/ttlcache +github.com/aws/aws-sdk-go-v2/service/kms/types +vendor/golang.org/x/crypto/cryptobyte +crypto/x509/pkix +golang.org/x/crypto/cryptobyte +github.com/tink-crypto/tink-go/internal/signature/ecdsa +github.com/go-logr/logr +go.opencensus.io/stats +k8s.io/klog/internal/sloghandler github.com/docker/cli/cli/config -github.com/src-d/gcfg go/doc +github.com/aws/aws-sdk-go/aws/awserr go/parser -k8s.io/klog/internal/serialize -github.com/go-logr/logr/funcr +github.com/aws/aws-sdk-go/internal/shareddefaults +github.com/aws/aws-sdk-go/aws/awsutil +github.com/googleapis/gax-go/v2/callctx github.com/spf13/viper/internal/encoding/yaml +github.com/google/certificate-transparency-go/x509/pkix github.com/google/gnostic-models/jsonschema -github.com/json-iterator/go -github.com/segmentio/ksuid -github.com/tink-crypto/tink-go/subtle/random -github.com/aws/aws-sdk-go-v2/service/kms/types -github.com/sigstore/cosign/internal/pkg/cosign/payload/size -github.com/aws/aws-sdk-go/aws/credentials -github.com/ProtonMail/go-crypto/bitcurves -github.com/ProtonMail/go-crypto/brainpool -github.com/tink-crypto/tink-go/subtle +go.step.sm/crypto/internal/utils +go.step.sm/crypto/fingerprint +go.opencensus.io/stats/view go.step.sm/crypto/x25519 go.step.sm/crypto/randutil -github.com/patrickmn/go-cache -crypto/x509/pkix -github.com/tink-crypto/tink-go/internal/signature/ecdsa -golang.org/x/oauth2/jws -github.com/sigstore/sigstore/pkg/signature/options -golang.org/x/crypto/cryptobyte -vendor/golang.org/x/crypto/cryptobyte -k8s.io/klog -github.com/go-git/go-git/plumbing/format/config -github.com/google/certificate-transparency-go/x509/pkix -go.mongodb.org/mongo-driver/x/bsonx/bsoncore -github.com/go-logr/stdr -github.com/aws/aws-sdk-go/aws/credentials/processcreds -github.com/go-git/go-git/plumbing/format/gitignore +github.com/spf13/viper/internal/encoding/toml +github.com/sigstore/gitsign/pkg/version +github.com/sigstore/gitsign/internal/cache/api +github.com/mattn/go-tty github.com/go-git/go-git/config +github.com/go-git/go-git/plumbing/format/gitignore +github.com/patrickmn/go-cache +github.com/russross/blackfriday/v2 +github.com/aws/aws-sdk-go/internal/ini sigs.k8s.io/yaml -go.uber.org/zap/internal -github.com/cloudflare/circl/internal/conv +github.com/syndtr/goleveldb/leveldb +github.com/aws/aws-sdk-go/aws/endpoints +k8s.io/klog/internal/serialize +github.com/go-logr/logr/funcr crypto/ecdsa +k8s.io/klog +github.com/cloudflare/circl/internal/conv +k8s.io/apimachinery/pkg/util/mergepatch +github.com/sigstore/gitsign/internal/io +github.com/go-git/go-git/storage +go.uber.org/zap/internal github.com/spf13/cast github.com/cloudflare/circl/math/fp25519 github.com/cloudflare/circl/math/fp448 github.com/cloudflare/circl/math/mlsbset -github.com/go-git/go-git/storage -k8s.io/apimachinery/pkg/util/mergepatch -google.golang.org/protobuf/internal/encoding/tag -google.golang.org/protobuf/encoding/protojson github.com/go-git/go-git/storage/memory github.com/go-git/go-git/storage/filesystem/dotgit -sigs.k8s.io/json -k8s.io/apimachinery/pkg/util/json -k8s.io/apimachinery/pkg/util/yaml -github.com/cloudflare/circl/sign/ed25519 +github.com/aws/aws-sdk-go/aws/credentials +github.com/go-logr/stdr +github.com/go-git/go-git/plumbing/protocol/packp +github.com/aws/aws-sdk-go/aws/credentials/processcreds github.com/cloudflare/circl/dh/x25519 +github.com/cloudflare/circl/sign/ed25519 go.mongodb.org/mongo-driver/bson/bsonrw -google.golang.org/protobuf/internal/impl +github.com/spf13/viper/internal/encoding/dotenv +github.com/spf13/viper/internal/encoding/ini github.com/cloudflare/circl/dh/x448 github.com/cloudflare/circl/ecc/goldilocks -github.com/go-git/go-git/plumbing/protocol/packp -github.com/spf13/viper/internal/encoding/ini -github.com/spf13/viper/internal/encoding/dotenv -github.com/ProtonMail/go-crypto/openpgp/x25519 -github.com/ProtonMail/go-crypto/openpgp/ed25519 -github.com/go-git/go-git/storage/filesystem -github.com/go-jose/go-jose/cipher +sigs.k8s.io/json +google.golang.org/protobuf/internal/encoding/tag +google.golang.org/protobuf/encoding/protojson github.com/spiffe/go-spiffe/v2/internal/cryptoutil -github.com/tink-crypto/tink-go/signature/subtle github.com/google/certificate-transparency-go/tls -github.com/go-jose/go-jose/v3/cipher gopkg.in/square/go-jose.v2/cipher +github.com/go-jose/go-jose/v3/cipher golang.org/x/crypto/openpgp/packet +github.com/go-jose/go-jose/cipher +github.com/tink-crypto/tink-go/signature/subtle +github.com/go-git/go-git/storage/filesystem +k8s.io/apimachinery/pkg/util/json github.com/spiffe/go-spiffe/v2/internal/jwtutil -github.com/ProtonMail/go-crypto/openpgp/x448 -github.com/cloudflare/circl/sign/ed448 -github.com/ProtonMail/go-crypto/openpgp/internal/ecc -github.com/ProtonMail/go-crypto/openpgp/ed448 +github.com/ProtonMail/go-crypto/openpgp/x25519 +google.golang.org/protobuf/internal/impl +github.com/cpuguy83/go-md2man/v2/md2man +github.com/ProtonMail/go-crypto/openpgp/ed25519 +k8s.io/apimachinery/pkg/util/yaml github.com/go-git/go-git/plumbing/transport +github.com/cloudflare/circl/sign/ed448 +github.com/ProtonMail/go-crypto/openpgp/x448 github.com/go-git/go-git/plumbing/transport/internal/common -k8s.io/apimachinery/pkg/runtime/serializer/cbor/internal/modes +github.com/ProtonMail/go-crypto/openpgp/ed448 +github.com/ProtonMail/go-crypto/openpgp/internal/ecc +github.com/google/go-containerregistry/internal/zstd +github.com/containerd/stargz-snapshotter/estargz +github.com/google/go-containerregistry/internal/compression +github.com/google/go-containerregistry/pkg/v1/partial github.com/ProtonMail/go-crypto/openpgp/ecdh github.com/ProtonMail/go-crypto/openpgp/eddsa github.com/ProtonMail/go-crypto/openpgp/ecdsa -crypto/x509 +k8s.io/apimachinery/pkg/runtime/serializer/cbor/internal/modes +golang.org/x/crypto/openpgp +github.com/ProtonMail/go-crypto/openpgp/packet +go.mongodb.org/mongo-driver/bson/bsoncodec +github.com/google/go-containerregistry/pkg/v1/empty +sigs.k8s.io/structured-merge-diff/value +k8s.io/apimachinery/pkg/runtime/serializer/cbor/direct +vendor/golang.org/x/net/http/httpproxy net/textproto google.golang.org/grpc/internal -github.com/google/go-containerregistry/pkg/name -github.com/google/uuid -github.com/mitchellh/mapstructure -github.com/mailru/easyjson/buffer -github.com/google/certificate-transparency-go/x509 google.golang.org/grpc/internal/syscall google.golang.org/grpc/internal/resolver/dns/internal +github.com/go-git/go-git/plumbing/transport/git golang.org/x/net/internal/socks +github.com/google/go-containerregistry/pkg/name +github.com/mitchellh/mapstructure +github.com/google/uuid +github.com/mailru/easyjson/buffer +k8s.io/client-go/util/connrotation k8s.io/utils/internal/third_party/forked/golang/net +crypto/x509 +github.com/google/certificate-transparency-go/x509 github.com/spf13/pflag -k8s.io/client-go/util/connrotation -vendor/golang.org/x/net/http/httpproxy -github.com/google/go-containerregistry/internal/zstd -github.com/containerd/stargz-snapshotter/estargz -github.com/go-git/go-git/plumbing/transport/git -github.com/ProtonMail/go-crypto/openpgp/packet k8s.io/utils/net github.com/mailru/easyjson/jwriter -github.com/google/go-containerregistry/internal/compression -github.com/sigstore/sigstore/pkg/signature/payload -github.com/google/go-containerregistry/pkg/authn google.golang.org/grpc/metadata google.golang.org/grpc/codes -github.com/google/go-containerregistry/pkg/v1/partial -go.mongodb.org/mongo-driver/bson/bsoncodec golang.org/x/net/proxy -golang.org/x/net/http/httpguts -net/mail -mime/multipart -vendor/golang.org/x/net/http/httpguts +github.com/sigstore/sigstore/pkg/signature/payload +sigs.k8s.io/structured-merge-diff/fieldpath +github.com/google/go-containerregistry/pkg/authn google.golang.org/grpc/internal/grpcutil google.golang.org/grpc/internal/balancerload google.golang.org/grpc/stats google.golang.org/grpc/tap -golang.org/x/crypto/openpgp -github.com/google/go-containerregistry/pkg/authn/github -k8s.io/apimachinery/pkg/util/validation +vendor/golang.org/x/net/http/httpguts +mime/multipart +golang.org/x/net/http/httpguts +net/mail google.golang.org/grpc/encoding -github.com/google/go-containerregistry/pkg/v1/empty -sigs.k8s.io/structured-merge-diff/value +k8s.io/apimachinery/pkg/util/validation +github.com/google/go-containerregistry/pkg/authn/github +github.com/ProtonMail/go-crypto/openpgp k8s.io/apimachinery/pkg/labels -k8s.io/apimachinery/pkg/runtime/serializer/cbor/direct k8s.io/apimachinery/pkg/runtime/schema k8s.io/apimachinery/pkg/util/intstr k8s.io/apimachinery/pkg/api/resource +github.com/google/go-containerregistry/internal/estargz +github.com/google/go-containerregistry/pkg/v1/tarball +github.com/go-git/go-git/plumbing/object +sigs.k8s.io/structured-merge-diff/typed +github.com/google/go-containerregistry/pkg/v1/mutate +go.mongodb.org/mongo-driver/bson +github.com/google/certificate-transparency-go +github.com/spf13/cobra github.com/spiffe/go-spiffe/v2/internal/x509util -github.com/secure-systems-lab/go-securesystemslib/signerverifier -github.com/go-jose/go-jose github.com/spiffe/go-spiffe/v2/internal/pemutil -github.com/sigstore/sigstore/pkg/cryptoutils -github.com/asaskevich/govalidator -github.com/digitorus/pkcs7 github.com/theupdateframework/go-tuf/v0/pkg/keys +github.com/digitorus/pkcs7 k8s.io/client-go/util/keyutil +github.com/asaskevich/govalidator +github.com/go-jose/go-jose/v3 +crypto/tls +github.com/sigstore/sigstore/pkg/cryptoutils github.com/sigstore/gitsign/internal github.com/github/smimesign/ietf-cms/oid -github.com/go-jose/go-jose/v3 +github.com/secure-systems-lab/go-securesystemslib/signerverifier gopkg.in/square/go-jose.v2 +github.com/go-jose/go-jose +github.com/google/go-containerregistry/pkg/v1/layout golang.org/x/crypto/ssh -crypto/tls -github.com/spf13/cobra +github.com/google/certificate-transparency-go/gossip/minimal/x509ext +github.com/sigstore/cosign/pkg/cosign/fulcioverifier/ctutil github.com/sigstore/gitsign/internal/gpg github.com/github/smimesign/ietf-cms/protocol github.com/spiffe/go-spiffe/v2/bundle/x509bundle -github.com/google/certificate-transparency-go -github.com/ProtonMail/go-crypto/openpgp -sigs.k8s.io/structured-merge-diff/fieldpath -github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/spiffe/go-spiffe/v2/svid/x509svid -github.com/google/certificate-transparency-go/gossip/minimal/x509ext -github.com/sigstore/cosign/pkg/cosign/fulcioverifier/ctutil -github.com/go-git/go-git/plumbing/object +github.com/sigstore/sigstore-go/pkg/fulcio/certificate github.com/digitorus/timestamp +sigs.k8s.io/structured-merge-diff/merge +k8s.io/client-go/applyconfigurations/internal +github.com/go-git/go-git/plumbing/revlist +github.com/sigstore/gitsign/internal/git/gittest github.com/theupdateframework/go-tuf/v0/internal/signer -github.com/theupdateframework/go-tuf/v0/sign github.com/theupdateframework/go-tuf/v0/verify -github.com/google/go-containerregistry/internal/estargz -github.com/theupdateframework/go-tuf/v0/pkg/targets +github.com/theupdateframework/go-tuf/v0/sign +github.com/go-git/go-git/plumbing/transport/server github.com/sigstore/timestamp-authority/pkg/verification -github.com/google/go-containerregistry/pkg/v1/tarball -go.mongodb.org/mongo-driver/bson -sigs.k8s.io/structured-merge-diff/typed +github.com/theupdateframework/go-tuf/v0/pkg/targets github.com/theupdateframework/go-tuf/v0 -github.com/go-jose/go-jose/v3/jwt -github.com/google/go-containerregistry/pkg/v1/mutate +github.com/go-git/go-git/plumbing/transport/file github.com/sigstore/gitsign/internal/commands/version sigs.k8s.io/release-utils/version github.com/spf13/cobra/doc +google.golang.org/protobuf/internal/filetype +github.com/go-jose/go-jose/v3/jwt github.com/spiffe/go-spiffe/v2/bundle/jwtbundle github.com/go-jose/go-jose/jwt github.com/spiffe/go-spiffe/v2/bundle/spiffebundle -github.com/google/go-containerregistry/pkg/v1/layout -github.com/sigstore/gitsign/internal/git/gittest -github.com/go-git/go-git/plumbing/revlist -github.com/go-git/go-git/plumbing/transport/server -github.com/spiffe/go-spiffe/v2/svid/jwtsvid -sigs.k8s.io/structured-merge-diff/merge -k8s.io/client-go/applyconfigurations/internal -github.com/go-git/go-git/plumbing/transport/file -google.golang.org/protobuf/internal/filetype google.golang.org/protobuf/runtime/protoimpl -google.golang.org/protobuf/types/known/timestamppb -google.golang.org/protobuf/types/known/durationpb -google.golang.org/protobuf/types/known/structpb -google.golang.org/genproto/googleapis/rpc/code +github.com/spiffe/go-spiffe/v2/svid/jwtsvid google.golang.org/protobuf/protoadapt +google.golang.org/protobuf/types/known/durationpb +google.golang.org/protobuf/types/known/timestamppb google.golang.org/protobuf/types/known/anypb +google.golang.org/protobuf/types/known/structpb github.com/sigstore/protobuf-specs/gen/pb-go/dsse -github.com/tink-crypto/tink-go/proto/ed25519_go_proto google.golang.org/protobuf/types/known/fieldmaskpb github.com/tink-crypto/tink-go/proto/tink_go_proto github.com/tink-crypto/tink-go/proto/common_go_proto +github.com/tink-crypto/tink-go/proto/ed25519_go_proto +google.golang.org/genproto/googleapis/rpc/code google.golang.org/protobuf/types/descriptorpb -golang.org/x/crypto/ssh/knownhosts -github.com/secure-systems-lab/go-securesystemslib/dsse -go.step.sm/crypto/keyutil -golang.org/x/crypto/ssh/agent google.golang.org/grpc/encoding/proto google.golang.org/grpc/internal/pretty -github.com/golang/protobuf/ptypes/timestamp -github.com/google/certificate-transparency-go/client/configpb -github.com/in-toto/in-toto-golang/in_toto github.com/golang/protobuf/ptypes/duration google.golang.org/genproto/googleapis/rpc/errdetails +github.com/golang/protobuf/ptypes/timestamp +github.com/google/certificate-transparency-go/client/configpb +github.com/tink-crypto/tink-go/proto/ecdsa_go_proto google.golang.org/genproto/googleapis/rpc/status -github.com/google/gnostic-models/extensions github.com/googleapis/gax-go/v2/apierror/internal/proto -github.com/tink-crypto/tink-go/proto/ecdsa_go_proto -go.step.sm/crypto/pemutil -github.com/skeema/knownhosts +github.com/google/gnostic-models/extensions +github.com/in-toto/attestation/go/v1 github.com/tink-crypto/tink-go/core/cryptofmt github.com/tink-crypto/tink-go/core/registry -github.com/in-toto/attestation/go/v1 google.golang.org/grpc/binarylog/grpc_binarylog_v1 -github.com/tink-crypto/tink-go/internal/primitiveset google.golang.org/grpc/internal/status -github.com/tink-crypto/tink-go/internal/registryconfig +github.com/tink-crypto/tink-go/internal/primitiveset github.com/tink-crypto/tink-go/internal/protoserialization +github.com/tink-crypto/tink-go/internal/registryconfig google.golang.org/grpc/status -github.com/xanzy/ssh-agent github.com/tink-crypto/tink-go/keyset google.golang.org/grpc/internal/binarylog +github.com/tink-crypto/tink-go/insecurecleartextkeyset +github.com/sigstore/rekor/pkg/signer/tink +google.golang.org/protobuf/internal/editionssupport +google.golang.org/protobuf/types/gofeaturespb +google.golang.org/genproto/googleapis/api/annotations +github.com/secure-systems-lab/go-securesystemslib/dsse +go.step.sm/crypto/keyutil +golang.org/x/crypto/ssh/knownhosts +golang.org/x/crypto/ssh/agent +google.golang.org/protobuf/reflect/protodesc +github.com/sigstore/protobuf-specs/gen/pb-go/common/v1 +github.com/in-toto/in-toto-golang/in_toto +github.com/skeema/knownhosts +go.step.sm/crypto/pemutil +github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1 +github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1 +github.com/sigstore/sigstore/pkg/signature +github.com/xanzy/ssh-agent +github.com/go-git/go-git/plumbing/transport/ssh net/http/httptrace -github.com/sassoftware/relic/lib/x509tools +google.golang.org/api/transport/cert google.golang.org/grpc/internal/credentials k8s.io/client-go/util/cert -google.golang.org/api/transport/cert github.com/coreos/go-systemd/activation -github.com/go-git/go-git/plumbing/transport/ssh +github.com/sassoftware/relic/lib/x509tools +github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1 google.golang.org/grpc/credentials -github.com/sigstore/cosign/pkg/cosign/attestation -google.golang.org/protobuf/internal/editionssupport -google.golang.org/protobuf/types/gofeaturespb net/http -google.golang.org/genproto/googleapis/api/annotations -github.com/tink-crypto/tink-go/insecurecleartextkeyset -github.com/sigstore/rekor/pkg/signer/tink +github.com/golang/protobuf/proto google.golang.org/grpc/credentials/insecure +google.golang.org/grpc/resolver google.golang.org/grpc/peer google.golang.org/grpc/internal/channelz -google.golang.org/protobuf/reflect/protodesc -google.golang.org/grpc/resolver -github.com/sassoftware/relic/lib/pkcs7 +github.com/sigstore/cosign/pkg/cosign/attestation google.golang.org/grpc/internal/metadata google.golang.org/grpc/internal/resolver/passthrough google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/balancer/grpclb/state -github.com/sigstore/protobuf-specs/gen/pb-go/common/v1 -google.golang.org/grpc/internal/resolver/unix +github.com/sigstore/rekor/pkg/pki/minisign +github.com/sigstore/rekor/pkg/pki/x509 +github.com/sigstore/sigstore/pkg/signature/dsse +github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier +github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding +github.com/sigstore/gitsign/internal/signerverifier +github.com/sigstore/cosign/pkg/cosign/pkcs11key +github.com/sigstore/cosign/pkg/cosign/pivkey +github.com/theupdateframework/go-tuf/metadata +github.com/sassoftware/relic/lib/pkcs7 google.golang.org/grpc/internal/resolver/dns +google.golang.org/grpc/internal/resolver/unix +github.com/sigstore/sigstore/pkg/signature/kms/cliplugin +github.com/sigstore/rekor/pkg/pki/pkcs7 google.golang.org/grpc/resolver/dns +github.com/sigstore/sigstore/pkg/signature/kms google.golang.org/grpc/channelz -github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1 -github.com/sigstore/sigstore/pkg/signature -github.com/sigstore/protobuf-specs/gen/pb-go/trustroot/v1 google.golang.org/grpc/balancer -google.golang.org/grpc/internal/serviceconfig google.golang.org/grpc/balancer/base -github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1 +google.golang.org/grpc/internal/serviceconfig google.golang.org/grpc/internal/resolver -github.com/golang/protobuf/proto google.golang.org/grpc/balancer/roundrobin google.golang.org/grpc/internal/balancer/gracefulswitch -github.com/sigstore/rekor/pkg/pki/pkcs7 -github.com/sigstore/sigstore/pkg/signature/dsse -github.com/sigstore/rekor/pkg/pki/x509 -github.com/theupdateframework/go-tuf/metadata -github.com/sigstore/cosign/pkg/cosign/pkcs11key -github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/encoding -github.com/sigstore/rekor/pkg/pki/minisign -github.com/sigstore/gitsign/internal/signerverifier -github.com/sigstore/sigstore/pkg/signature/kms/cliplugin/internal/signerverifier -github.com/sigstore/cosign/pkg/cosign/pivkey -github.com/sigstore/sigstore/pkg/signature/kms/cliplugin -github.com/sigstore/sigstore/pkg/signature/kms github.com/theupdateframework/go-tuf/metadata/trustedmetadata -github.com/sigstore/cosign/pkg/providers/github -golang.org/x/oauth2/internal -go.opencensus.io/trace/propagation -golang.org/x/net/trace -net/http/httputil cloud.google.com/go/compute/metadata -github.com/docker/distribution/registry/client/auth/challenge -github.com/aws/smithy-go/endpoints -github.com/go-openapi/errors -github.com/go-git/go-git/plumbing/transport/http -google.golang.org/api/googleapi/transport +go.opencensus.io/trace/propagation github.com/aws/smithy-go/encoding/httpbinding -github.com/go-openapi/swag -github.com/go-chi/chi +github.com/docker/distribution/registry/client/auth/challenge expvar -github.com/sigstore/rekor/pkg/pki/ssh -net/http/pprof -github.com/sigstore/rekor/pkg/pki/pgp -github.com/sigstore/cosign/pkg/blob github.com/theupdateframework/go-tuf/metadata/fetcher -github.com/sigstore/rekor/pkg/util -github.com/google/certificate-transparency-go/x509util -golang.org/x/net/http2 -go.uber.org/zap -github.com/magiconair/properties -github.com/go-openapi/runtime/middleware/denco -github.com/spf13/afero github.com/go-openapi/runtime/middleware/header -github.com/opentracing/opentracing-go -go.opentelemetry.io/otel/propagation -golang.org/x/net/context/ctxhttp +google.golang.org/api/googleapi/transport +github.com/google/certificate-transparency-go/x509util +github.com/sigstore/rekor/pkg/pki/pgp go.opentelemetry.io/otel/semconv/internal/v2 +golang.org/x/oauth2/internal +net/http/httptest +net/http/httputil +github.com/go-git/go-git/plumbing/transport/http k8s.io/apimachinery/pkg/util/runtime -github.com/sigstore/fulcio/pkg/api -github.com/theupdateframework/go-tuf/v0/client +go.uber.org/zap +github.com/sigstore/cosign/pkg/blob github.com/hashicorp/go-cleanhttp -github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp -net/http/httptest -github.com/sigstore/cosign/internal/pkg/cosign/tsa/client +golang.org/x/net/http2 +github.com/theupdateframework/go-tuf/v0/client +github.com/aws/smithy-go/endpoints github.com/google/gnostic-models/compiler +net/http/pprof +github.com/opentracing/opentracing-go +github.com/sigstore/fulcio/pkg/api +golang.org/x/net/context/ctxhttp +golang.org/x/net/trace +github.com/magiconair/properties +github.com/sigstore/cosign/pkg/providers/github +github.com/sigstore/rekor/pkg/pki/ssh +github.com/sigstore/rekor/pkg/util +github.com/go-openapi/runtime/middleware/denco +github.com/go-openapi/swag +github.com/go-openapi/errors +go.opentelemetry.io/otel/propagation +github.com/go-chi/chi +github.com/spf13/afero github.com/emicklei/go-restful +github.com/sigstore/cosign/internal/pkg/cosign/tsa/client +github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/google/go-github/github go.opencensus.io/plugin/ochttp/propagation/b3 google.golang.org/api/transport/http/internal/propagation -github.com/aws/aws-sdk-go/aws -google.golang.org/api/googleapi -net/rpc +github.com/theupdateframework/go-tuf/metadata/config github.com/google/certificate-transparency-go/jsonclient -github.com/hashicorp/go-retryablehttp -go.opencensus.io/plugin/ochttp +k8s.io/apimachinery/pkg/runtime k8s.io/client-go/features k8s.io/apimachinery/pkg/util/wait -k8s.io/client-go/util/workqueue -github.com/theupdateframework/go-tuf/metadata/config -k8s.io/apimachinery/pkg/runtime +github.com/hashicorp/go-retryablehttp +github.com/aws/aws-sdk-go/aws +github.com/sigstore/rekor/pkg/pki golang.org/x/oauth2 -go.opentelemetry.io/otel/internal/global -github.com/sigstore/gitsign/internal/fork/ietf-cms +k8s.io/client-go/util/workqueue github.com/theupdateframework/go-tuf/metadata/updater -github.com/sigstore/rekor/pkg/pki github.com/opentracing/opentracing-go/ext +go.opentelemetry.io/otel/internal/global +google.golang.org/api/googleapi +net/rpc +go.opencensus.io/plugin/ochttp +github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/go-openapi/strfmt go.opentelemetry.io/otel/semconv/v1.17.0/httpconv -github.com/googleapis/gax-go/v2/apierror -github.com/google/certificate-transparency-go/loglist3 -github.com/google/gnostic-models/openapiv3 -github.com/google/gnostic-models/openapiv2 +github.com/google/certificate-transparency-go/client github.com/google/go-containerregistry/pkg/v1/remote/transport -github.com/go-git/go-git/plumbing/transport/client -github.com/aws/smithy-go/transport/http +github.com/google/gnostic-models/openapiv2 github.com/theupdateframework/go-tuf/v0/client/leveldbstore +github.com/aws/smithy-go/transport/http +github.com/google/gnostic-models/openapiv3 +github.com/go-git/go-git/plumbing/transport/client +github.com/google/certificate-transparency-go/loglist3 github.com/spf13/viper/internal/encoding/javaproperties -github.com/google/certificate-transparency-go/client +github.com/googleapis/gax-go/v2/apierror +github.com/go-git/go-git github.com/sigstore/sigstore/pkg/tuf +github.com/go-chi/chi/middleware +github.com/sigstore/sigstore-go/pkg/tuf golang.org/x/oauth2/authhandler golang.org/x/oauth2/google/internal/impersonate golang.org/x/oauth2/google/internal/stsexchange -github.com/go-git/go-git -google.golang.org/api/internal/impersonate golang.org/x/oauth2/jwt +google.golang.org/api/internal/impersonate github.com/coreos/go-oidc/v3/oidc -github.com/aws/aws-sdk-go/aws/auth/bearer github.com/aws/aws-sdk-go/aws/request -github.com/go-chi/chi/middleware -github.com/sigstore/sigstore-go/pkg/tuf -golang.org/x/oauth2/google/internal/externalaccountauthorizeduser -github.com/google/certificate-transparency-go/ctutil +github.com/aws/aws-sdk-go/aws/auth/bearer gitlab.com/gitlab-org/api/client-go +github.com/google/certificate-transparency-go/ctutil +golang.org/x/oauth2/google/internal/externalaccountauthorizeduser golang.org/x/oauth2/google/externalaccount github.com/google/go-containerregistry/pkg/v1/remote go.opentelemetry.io/otel +github.com/aws/smithy-go/auth/bearer github.com/aws/aws-sdk-go-v2/internal/auth +github.com/aws/aws-sdk-go-v2/internal/endpoints/awsrulesfn github.com/aws/aws-sdk-go-v2/aws/protocol/query -github.com/aws/smithy-go/auth/bearer -github.com/aws/smithy-go/private/requestcompression github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding +github.com/aws/smithy-go/private/requestcompression +github.com/sigstore/gitsign/internal/cache github.com/sigstore/sigstore/pkg/fulcioroots github.com/sigstore/gitsign/internal/fulcio/fulcioroots -github.com/aws/aws-sdk-go-v2/internal/endpoints/awsrulesfn github.com/sigstore/sigstore/pkg/oauthflow -github.com/sigstore/gitsign/internal/cache +github.com/sigstore/sigstore-go/pkg/root github.com/spf13/viper -github.com/sigstore/cosign/internal/pkg/cosign/fulcio/fulcioroots github.com/aws/aws-sdk-go-v2/aws +github.com/sigstore/cosign/internal/pkg/cosign/fulcio/fulcioroots +github.com/go-openapi/jsonpointer github.com/aws/aws-sdk-go/aws/client -github.com/aws/aws-sdk-go/private/protocol github.com/aws/aws-sdk-go/aws/corehandlers +github.com/aws/aws-sdk-go/private/protocol github.com/aws/aws-sdk-go/aws/csm -github.com/go-openapi/jsonpointer -github.com/go-openapi/runtime -github.com/sigstore/sigstore-go/pkg/root -github.com/aws/aws-sdk-go/aws/ec2metadata golang.org/x/oauth2/google -github.com/aws/aws-sdk-go/private/protocol/query/queryutil -github.com/aws/aws-sdk-go/private/protocol/rest +github.com/aws/aws-sdk-go/aws/ec2metadata +github.com/sigstore/rekor/pkg/log +github.com/go-openapi/jsonreference github.com/sigstore/gitsign/pkg/fulcio github.com/aws/aws-sdk-go/private/protocol/json/jsonutil -github.com/sigstore/rekor/pkg/log github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil -github.com/go-openapi/jsonreference +github.com/aws/aws-sdk-go/private/protocol/rest +github.com/aws/aws-sdk-go/private/protocol/query/queryutil +k8s.io/apimachinery/pkg/runtime/serializer/recognizer +k8s.io/apimachinery/pkg/runtime/serializer/streaming +k8s.io/client-go/tools/clientcmd/api +github.com/go-openapi/runtime +k8s.io/apimachinery/pkg/runtime/serializer/json github.com/aws/aws-sdk-go-v2/credentials github.com/aws/aws-sdk-go-v2/credentials/processcreds -github.com/aws/aws-sdk-go-v2/internal/configsources +github.com/aws/aws-sdk-go-v2/aws/middleware github.com/aws/aws-sdk-go-v2/aws/signer/internal/v4 +github.com/aws/aws-sdk-go-v2/internal/configsources github.com/aws/aws-sdk-go-v2/internal/endpoints -github.com/aws/aws-sdk-go-v2/aws/defaults github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 github.com/awslabs/amazon-ecr-credential-helper/ecr-login/cache -github.com/sigstore/gitsign/internal/fulcio -github.com/aws/aws-sdk-go-v2/aws/middleware github.com/google/go-containerregistry/pkg/v1/google k8s.io/kube-openapi/pkg/internal +github.com/aws/aws-sdk-go-v2/aws/defaults github.com/go-openapi/spec -github.com/aws/aws-sdk-go-v2/service/sso/internal/endpoints +github.com/sigstore/gitsign/internal/fulcio +github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints github.com/aws/aws-sdk-go-v2/service/sts/internal/endpoints +github.com/aws/aws-sdk-go-v2/service/ecr/internal/endpoints github.com/aws/aws-sdk-go-v2/service/ecrpublic/internal/endpoints -github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints github.com/aws/aws-sdk-go-v2/service/kms/internal/endpoints -github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds -github.com/aws/aws-sdk-go-v2/service/ecr/internal/endpoints +github.com/aws/aws-sdk-go-v2/service/sso/internal/endpoints +k8s.io/client-go/tools/clientcmd/api/v1 github.com/aws/aws-sdk-go/aws/credentials/endpointcreds -github.com/aws/aws-sdk-go/private/protocol/jsonrpc -k8s.io/apimachinery/pkg/runtime/serializer/recognizer -k8s.io/apimachinery/pkg/runtime/serializer/streaming -k8s.io/client-go/tools/clientcmd/api -github.com/aws/aws-sdk-go/aws/signer/v4 +github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds github.com/aws/aws-sdk-go/private/protocol/query github.com/sigstore/gitsign/internal/cache/service -k8s.io/apimachinery/pkg/runtime/serializer/json -github.com/aws/aws-sdk-go-v2/aws/retry -github.com/go-openapi/runtime/security github.com/aws/aws-sdk-go-v2/aws/transport/http -github.com/go-openapi/runtime/yamlpc github.com/aws/aws-sdk-go-v2/aws/signer/v4 +github.com/aws/aws-sdk-go-v2/aws/retry +github.com/aws/aws-sdk-go/aws/signer/v4 +github.com/aws/aws-sdk-go/private/protocol/jsonrpc github.com/aws/aws-sdk-go/aws/defaults github.com/sigstore/gitsign/cmd/gitsign-credential-cache +github.com/go-openapi/runtime/security +github.com/go-openapi/runtime/yamlpc github.com/aws/aws-sdk-go/private/protocol/restjson -k8s.io/client-go/tools/clientcmd/api/v1 github.com/sigstore/gitsign/internal/commands/show github.com/aws/aws-sdk-go/service/sts github.com/aws/aws-sdk-go/service/kms -github.com/aws/aws-sdk-go-v2/internal/auth/smithy -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url github.com/aws/aws-sdk-go/service/sso github.com/aws/aws-sdk-go/service/ssooidc +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url +github.com/aws/aws-sdk-go-v2/internal/auth/smithy github.com/aws/aws-sdk-go-v2/credentials/endpointcreds/internal/client github.com/aws/aws-sdk-go-v2/feature/ec2/imds -k8s.io/apimachinery/pkg/util/net -google.golang.org/grpc/internal/transport -github.com/aws/aws-sdk-go-v2/service/sso github.com/aws/aws-sdk-go-v2/service/ssooidc +github.com/aws/aws-sdk-go-v2/service/ecr +github.com/aws/aws-sdk-go-v2/service/sso github.com/aws/aws-sdk-go-v2/service/sts github.com/aws/aws-sdk-go-v2/service/ecrpublic github.com/aws/aws-sdk-go-v2/service/kms -github.com/aws/aws-sdk-go-v2/service/ecr -github.com/aws/aws-sdk-go/service/sts/stsiface -github.com/aws/aws-sdk-go/aws/credentials/stscreds +google.golang.org/grpc/internal/transport +k8s.io/apimachinery/pkg/util/net +github.com/aws/aws-sdk-go-v2/credentials/endpointcreds github.com/aws/aws-sdk-go/service/sso/ssoiface -github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds -k8s.io/apimachinery/pkg/watch -k8s.io/client-go/transport github.com/aws/aws-sdk-go/aws/credentials/ssocreds +github.com/aws/aws-sdk-go/service/sts/stsiface +github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds +github.com/aws/aws-sdk-go/aws/credentials/stscreds github.com/go-openapi/analysis/internal/flatten/normalize -github.com/go-openapi/analysis/internal/flatten/operations github.com/go-openapi/analysis/internal/flatten/replace github.com/go-openapi/analysis/internal/flatten/schutils -github.com/aws/aws-sdk-go-v2/credentials/endpointcreds +github.com/go-openapi/analysis/internal/flatten/operations github.com/go-openapi/analysis/internal/flatten/sortref -k8s.io/apimachinery/pkg/apis/meta/v1 github.com/aws/aws-sdk-go/aws/session +k8s.io/apimachinery/pkg/watch +k8s.io/client-go/transport github.com/go-openapi/analysis +k8s.io/apimachinery/pkg/apis/meta/v1 github.com/aws/aws-sdk-go-v2/credentials/ssocreds -google.golang.org/grpc github.com/go-openapi/loads github.com/go-openapi/runtime/middleware/untyped github.com/go-openapi/validate -k8s.io/kube-openapi/pkg/util/proto +google.golang.org/grpc k8s.io/kube-openapi/pkg/validation/spec +k8s.io/kube-openapi/pkg/util/proto github.com/aws/aws-sdk-go-v2/credentials/stscreds github.com/aws/aws-sdk-go-v2/config github.com/aws/aws-sdk-go/service/kms/kmsiface github.com/tink-crypto/tink-go-awskms/integration/awskms -k8s.io/kube-openapi/pkg/spec3 k8s.io/kube-openapi/pkg/schemaconv +k8s.io/kube-openapi/pkg/spec3 github.com/go-openapi/runtime/middleware github.com/sigstore/rekor/pkg/generated/models -github.com/spiffe/go-spiffe/v2/proto/spiffe/workload -github.com/google/trillian google.golang.org/api/internal +github.com/spiffe/go-spiffe/v2/proto/spiffe/workload github.com/googleapis/gax-go/v2 -google.golang.org/api/transport/internal/dca -google.golang.org/api/option -github.com/go-openapi/runtime/client -google.golang.org/api/internal/gensupport -github.com/spiffe/go-spiffe/v2/workloadapi +github.com/google/trillian k8s.io/apimachinery/pkg/api/errors k8s.io/api/apidiscovery/v2 -k8s.io/api/apidiscovery/v2beta1 -k8s.io/apimachinery/pkg/runtime/serializer/protobuf -k8s.io/apimachinery/pkg/apis/meta/v1/unstructured -k8s.io/api/apiserverinternal/v1alpha1 -k8s.io/api/admissionregistration/v1 -k8s.io/api/certificates/v1alpha1 -k8s.io/api/authentication/v1 -k8s.io/api/coordination/v1 -k8s.io/api/flowcontrol/v1 k8s.io/api/flowcontrol/v1beta2 k8s.io/api/flowcontrol/v1beta1 -k8s.io/api/authorization/v1 -k8s.io/api/flowcontrol/v1beta3 +k8s.io/api/apidiscovery/v2beta1 k8s.io/api/networking/v1alpha1 -k8s.io/api/core/v1 k8s.io/api/policy/v1 +k8s.io/api/admissionregistration/v1 +k8s.io/api/apiserverinternal/v1alpha1 k8s.io/api/policy/v1beta1 k8s.io/api/rbac/v1 -k8s.io/api/rbac/v1alpha1 +k8s.io/api/flowcontrol/v1beta3 k8s.io/api/rbac/v1beta1 +k8s.io/apimachinery/pkg/runtime/serializer/protobuf +k8s.io/api/rbac/v1alpha1 +k8s.io/apimachinery/pkg/apis/meta/v1/unstructured +k8s.io/api/authorization/v1 +k8s.io/api/flowcontrol/v1 +k8s.io/api/coordination/v1 +k8s.io/api/core/v1 +k8s.io/api/certificates/v1alpha1 k8s.io/apimachinery/pkg/api/meta k8s.io/apimachinery/pkg/api/equality k8s.io/apimachinery/pkg/apis/meta/v1/validation +k8s.io/api/authentication/v1 k8s.io/client-go/pkg/apis/clientauthentication k8s.io/client-go/rest/watch k8s.io/apimachinery/pkg/apis/meta/v1beta1 -google.golang.org/api/transport/http -google.golang.org/api/option/internaloption -k8s.io/client-go/pkg/apis/clientauthentication/v1 +google.golang.org/api/option +google.golang.org/api/transport/internal/dca +github.com/go-openapi/runtime/client +google.golang.org/api/internal/gensupport k8s.io/client-go/pkg/apis/clientauthentication/v1beta1 +k8s.io/client-go/pkg/apis/clientauthentication/v1 k8s.io/apimachinery/pkg/apis/meta/internalversion -google.golang.org/api/cloudkms/v1 -google.golang.org/api/impersonate -google.golang.org/api/idtoken -k8s.io/api/coordination/v1beta1 +github.com/spiffe/go-spiffe/v2/workloadapi k8s.io/api/coordination/v1alpha2 +k8s.io/api/coordination/v1beta1 +google.golang.org/api/option/internaloption +google.golang.org/api/transport/http k8s.io/client-go/pkg/apis/clientauthentication/install -github.com/sigstore/rekor/pkg/types -github.com/sigstore/rekor/pkg/generated/client/pubkey -github.com/sigstore/rekor/pkg/generated/client/index -github.com/sigstore/rekor/pkg/generated/client/tlog -github.com/sigstore/rekor/pkg/generated/client/entries +k8s.io/kube-openapi/pkg/common +k8s.io/apimachinery/pkg/apis/meta/internalversion/validation +k8s.io/apimachinery/pkg/runtime/serializer/versioning k8s.io/apimachinery/pkg/runtime/serializer/cbor k8s.io/apimachinery/pkg/util/strategicpatch -k8s.io/apimachinery/pkg/runtime/serializer/versioning -k8s.io/kube-openapi/pkg/common +k8s.io/client-go/util/watchlist +google.golang.org/api/idtoken +google.golang.org/api/cloudkms/v1 +google.golang.org/api/impersonate github.com/google/trillian/types -k8s.io/apimachinery/pkg/apis/meta/internalversion/validation +github.com/sigstore/rekor/pkg/types +github.com/sigstore/rekor/pkg/generated/client/entries +k8s.io/api/authentication/v1alpha1 +k8s.io/api/authentication/v1beta1 +github.com/sigstore/rekor/pkg/generated/client/index +github.com/sigstore/rekor/pkg/generated/client/pubkey github.com/sigstore/cosign/pkg/providers/spiffe -k8s.io/client-go/util/watchlist +github.com/sigstore/rekor/pkg/generated/client/tlog +k8s.io/kube-openapi/pkg/handler3 +k8s.io/api/authorization/v1beta1 +k8s.io/apimachinery/pkg/runtime/serializer +k8s.io/client-go/tools/clientcmd/api/latest +github.com/sigstore/cosign/pkg/providers/google +k8s.io/apimachinery/pkg/api/validation +k8s.io/apimachinery/pkg/api/meta/testrestmapper +k8s.io/client-go/util/consistencydetector +k8s.io/client-go/plugin/pkg/client/auth/exec +github.com/sigstore/cosign/pkg/providers/all +github.com/sigstore/rekor/pkg/tle github.com/sigstore/rekor/pkg/types/dsse github.com/sigstore/rekor/pkg/types/hashedrekord github.com/sigstore/rekor/pkg/types/intoto github.com/sigstore/rekor/pkg/types/rekord -github.com/sigstore/rekor/pkg/tle -k8s.io/api/authentication/v1alpha1 -k8s.io/api/authentication/v1beta1 -k8s.io/apimachinery/pkg/api/meta/testrestmapper -k8s.io/client-go/util/consistencydetector -k8s.io/apimachinery/pkg/api/validation -github.com/sigstore/cosign/pkg/providers/google -github.com/sigstore/cosign/pkg/cosign/bundle github.com/sigstore/rekor/pkg/generated/client -k8s.io/client-go/tools/clientcmd/api/latest -k8s.io/apimachinery/pkg/runtime/serializer -k8s.io/kube-openapi/pkg/handler3 -github.com/sigstore/rekor/pkg/client +k8s.io/apimachinery/pkg/util/managedfields/internal +github.com/sigstore/cosign/pkg/cosign/bundle github.com/sigstore/rekor/pkg/verify -github.com/sigstore/cosign/pkg/providers/all +github.com/sigstore/rekor/pkg/client github.com/sigstore/cosign/pkg/oci -github.com/sigstore/rekor/pkg/types/dsse/v0.0.1 +k8s.io/client-go/rest github.com/sigstore/rekor/pkg/types/rekord/v0.0.1 -k8s.io/client-go/plugin/pkg/client/auth/exec -github.com/sigstore/rekor/pkg/types/intoto/v0.0.1 -github.com/sigstore/rekor/pkg/types/intoto/v0.0.2 -k8s.io/api/authorization/v1beta1 -github.com/sigstore/cosign/pkg/oci/internal/signature github.com/sigstore/cosign/internal/pkg/cosign +github.com/sigstore/cosign/pkg/oci/internal/signature github.com/sigstore/cosign/pkg/oci/empty -k8s.io/apimachinery/pkg/util/managedfields/internal +github.com/sigstore/rekor/pkg/types/intoto/v0.0.2 github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1 +github.com/sigstore/rekor/pkg/types/intoto/v0.0.1 +github.com/sigstore/rekor/pkg/types/dsse/v0.0.1 github.com/sigstore/cosign/pkg/oci/signed github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/cosign/pkg/oci/layout +k8s.io/api/admissionregistration/v1alpha1 github.com/sigstore/cosign/pkg/oci/static +k8s.io/api/admissionregistration/v1beta1 github.com/sigstore/sigstore-go/pkg/tlog -k8s.io/client-go/rest -github.com/sigstore/cosign/pkg/oci/mutate github.com/sigstore/cosign/internal/pkg/cosign/payload +github.com/sigstore/cosign/pkg/oci/mutate github.com/tink-crypto/tink-go-gcpkms/integration/gcpkms github.com/sigstore/sigstore-go/pkg/verify -github.com/sigstore/cosign/internal/pkg/cosign/fulcio -github.com/sigstore/cosign/pkg/cosign/remote -github.com/sigstore/cosign/internal/pkg/cosign/tsa -github.com/sigstore/cosign/pkg/oci/walk -k8s.io/api/admissionregistration/v1alpha1 -k8s.io/api/admissionregistration/v1beta1 -k8s.io/apimachinery/pkg/util/managedfields github.com/awslabs/amazon-ecr-credential-helper/ecr-login/api -github.com/sigstore/sigstore-go/pkg/bundle -github.com/sigstore/sigstore/pkg/signature/kms/aws +k8s.io/apimachinery/pkg/util/managedfields k8s.io/client-go/util/apply k8s.io/client-go/plugin/pkg/client/auth/azure -github.com/awslabs/amazon-ecr-credential-helper/ecr-login k8s.io/client-go/plugin/pkg/client/auth/gcp -k8s.io/client-go/tools/auth k8s.io/client-go/plugin/pkg/client/auth/oidc +k8s.io/client-go/tools/auth +github.com/awslabs/amazon-ecr-credential-helper/ecr-login +github.com/sigstore/cosign/pkg/oci/walk +github.com/sigstore/cosign/internal/pkg/cosign/tsa +github.com/sigstore/cosign/internal/pkg/cosign/fulcio +github.com/sigstore/cosign/pkg/cosign/remote k8s.io/client-go/tools/clientcmd -github.com/sigstore/cosign/pkg/oci/remote k8s.io/client-go/plugin/pkg/client/auth +github.com/sigstore/sigstore/pkg/signature/kms/aws +github.com/sigstore/sigstore-go/pkg/bundle k8s.io/client-go/openapi k8s.io/client-go/testing +github.com/sigstore/cosign/pkg/oci/remote github.com/sigstore/rekor/pkg/signer github.com/sigstore/rekor/pkg/sharding github.com/sigstore/cosign/pkg/cosign k8s.io/client-go/gentype +github.com/sigstore/cosign/pkg/cosign/git/github +github.com/sigstore/gitsign/internal/cert github.com/sigstore/cosign/internal/pkg/cosign/rekor github.com/sigstore/gitsign/pkg/rekor -github.com/sigstore/gitsign/internal/cert github.com/sigstore/cosign/pkg/cosign/git/gitlab -github.com/sigstore/cosign/pkg/cosign/git/github github.com/sigstore/cosign/pkg/cosign/git github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/internal/git -k8s.io/api/autoscaling/v2 -k8s.io/api/autoscaling/v1 +k8s.io/api/apps/v1 k8s.io/api/certificates/v1beta1 -k8s.io/api/apps/v1beta1 k8s.io/api/discovery/v1beta1 -k8s.io/api/apps/v1beta2 -k8s.io/client-go/tools/reference -k8s.io/api/certificates/v1 -k8s.io/api/events/v1beta1 -k8s.io/api/autoscaling/v2beta2 -k8s.io/api/events/v1 -k8s.io/api/storage/v1 +k8s.io/api/autoscaling/v2beta1 k8s.io/api/discovery/v1 -k8s.io/api/storagemigration/v1alpha1 +k8s.io/api/autoscaling/v1 +k8s.io/api/autoscaling/v2 +k8s.io/api/apps/v1beta1 +k8s.io/api/autoscaling/v2beta2 k8s.io/api/batch/v1 -k8s.io/api/autoscaling/v2beta1 -k8s.io/api/storage/v1beta1 +k8s.io/api/events/v1 +k8s.io/api/node/v1 +k8s.io/api/events/v1beta1 +k8s.io/client-go/tools/reference +k8s.io/api/node/v1beta1 +k8s.io/api/scheduling/v1 +k8s.io/api/certificates/v1 +k8s.io/api/node/v1alpha1 k8s.io/api/scheduling/v1alpha1 k8s.io/api/scheduling/v1beta1 +k8s.io/api/networking/v1beta1 k8s.io/api/networking/v1 -k8s.io/api/node/v1alpha1 -k8s.io/api/resource/v1beta1 -k8s.io/api/scheduling/v1 +k8s.io/api/apps/v1beta2 +k8s.io/api/storagemigration/v1alpha1 k8s.io/api/storage/v1alpha1 -k8s.io/api/node/v1 -k8s.io/api/node/v1beta1 +k8s.io/api/resource/v1beta1 +k8s.io/api/storage/v1 +k8s.io/api/storage/v1beta1 k8s.io/api/resource/v1alpha3 -k8s.io/api/networking/v1beta1 -k8s.io/api/apps/v1 k8s.io/api/batch/v1beta1 k8s.io/api/extensions/v1beta1 k8s.io/client-go/kubernetes/scheme -k8s.io/client-go/kubernetes/typed/authentication/v1 k8s.io/client-go/kubernetes/typed/authentication/v1alpha1 +k8s.io/client-go/discovery k8s.io/client-go/kubernetes/typed/authentication/v1beta1 +k8s.io/client-go/kubernetes/typed/authentication/v1 k8s.io/client-go/kubernetes/typed/authorization/v1 k8s.io/client-go/kubernetes/typed/authorization/v1beta1 -k8s.io/client-go/discovery k8s.io/client-go/applyconfigurations/meta/v1 k8s.io/client-go/applyconfigurations/certificates/v1alpha1 -k8s.io/client-go/applyconfigurations/apiserverinternal/v1alpha1 -k8s.io/client-go/applyconfigurations/autoscaling/v1 k8s.io/client-go/applyconfigurations/certificates/v1 -k8s.io/client-go/applyconfigurations/autoscaling/v2 k8s.io/client-go/applyconfigurations/coordination/v1 k8s.io/client-go/applyconfigurations/coordination/v1alpha2 -k8s.io/client-go/applyconfigurations/autoscaling/v2beta1 -k8s.io/client-go/applyconfigurations/coordination/v1beta1 -k8s.io/client-go/applyconfigurations/scheduling/v1alpha1 k8s.io/client-go/applyconfigurations/certificates/v1beta1 -k8s.io/client-go/applyconfigurations/flowcontrol/v1 -k8s.io/client-go/applyconfigurations/policy/v1beta1 -k8s.io/client-go/applyconfigurations/scheduling/v1beta1 +k8s.io/client-go/applyconfigurations/coordination/v1beta1 k8s.io/client-go/applyconfigurations/networking/v1alpha1 -k8s.io/client-go/applyconfigurations/policy/v1 -k8s.io/client-go/applyconfigurations/admissionregistration/v1 k8s.io/client-go/applyconfigurations/scheduling/v1 -k8s.io/client-go/applyconfigurations/rbac/v1beta1 -k8s.io/client-go/applyconfigurations/rbac/v1alpha1 -k8s.io/client-go/applyconfigurations/flowcontrol/v1beta2 +k8s.io/client-go/applyconfigurations/scheduling/v1alpha1 +k8s.io/client-go/applyconfigurations/policy/v1 k8s.io/client-go/applyconfigurations/rbac/v1 -k8s.io/client-go/applyconfigurations/flowcontrol/v1beta3 -k8s.io/client-go/applyconfigurations/flowcontrol/v1beta1 +k8s.io/client-go/applyconfigurations/flowcontrol/v1beta2 +k8s.io/client-go/applyconfigurations/rbac/v1alpha1 +k8s.io/client-go/applyconfigurations/rbac/v1beta1 +k8s.io/client-go/applyconfigurations/apiserverinternal/v1alpha1 +k8s.io/client-go/applyconfigurations/autoscaling/v2beta1 +k8s.io/client-go/applyconfigurations/autoscaling/v2 +k8s.io/client-go/applyconfigurations/autoscaling/v1 +k8s.io/client-go/applyconfigurations/scheduling/v1beta1 +k8s.io/client-go/applyconfigurations/policy/v1beta1 k8s.io/client-go/applyconfigurations/storagemigration/v1alpha1 k8s.io/client-go/applyconfigurations/autoscaling/v2beta2 +k8s.io/client-go/applyconfigurations/flowcontrol/v1beta3 +k8s.io/client-go/applyconfigurations/admissionregistration/v1 +k8s.io/client-go/applyconfigurations/flowcontrol/v1 +k8s.io/client-go/applyconfigurations/flowcontrol/v1beta1 k8s.io/client-go/applyconfigurations/core/v1 -k8s.io/client-go/kubernetes/typed/certificates/v1beta1 -k8s.io/client-go/kubernetes/typed/admissionregistration/v1 -k8s.io/client-go/applyconfigurations/admissionregistration/v1alpha1 -k8s.io/client-go/applyconfigurations/admissionregistration/v1beta1 +k8s.io/client-go/kubernetes/typed/policy/v1beta1 +k8s.io/client-go/kubernetes/typed/scheduling/v1 +k8s.io/client-go/kubernetes/typed/certificates/v1alpha1 +k8s.io/client-go/kubernetes/typed/scheduling/v1beta1 k8s.io/client-go/kubernetes/typed/apiserverinternal/v1alpha1 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta2 -k8s.io/client-go/kubernetes/typed/networking/v1alpha1 -k8s.io/client-go/kubernetes/typed/rbac/v1alpha1 -k8s.io/client-go/kubernetes/typed/rbac/v1 -k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2 k8s.io/client-go/kubernetes/typed/storagemigration/v1alpha1 -k8s.io/client-go/kubernetes/typed/certificates/v1alpha1 -k8s.io/client-go/kubernetes/typed/admissionregistration/v1alpha1 -k8s.io/client-go/kubernetes/typed/admissionregistration/v1beta1 -k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta3 +k8s.io/client-go/kubernetes/typed/networking/v1alpha1 +k8s.io/client-go/kubernetes/typed/certificates/v1 k8s.io/client-go/kubernetes/typed/coordination/v1 -k8s.io/client-go/kubernetes/typed/policy/v1beta1 k8s.io/client-go/kubernetes/typed/autoscaling/v1 -k8s.io/client-go/kubernetes/typed/scheduling/v1beta1 -k8s.io/client-go/kubernetes/typed/policy/v1 -k8s.io/client-go/kubernetes/typed/certificates/v1 -k8s.io/client-go/kubernetes/typed/scheduling/v1 +k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1 +k8s.io/client-go/kubernetes/typed/certificates/v1beta1 k8s.io/client-go/kubernetes/typed/coordination/v1beta1 +k8s.io/client-go/kubernetes/typed/rbac/v1alpha1 +k8s.io/client-go/kubernetes/typed/policy/v1 k8s.io/client-go/kubernetes/typed/coordination/v1alpha2 -k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1 +k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta2 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta3 k8s.io/client-go/kubernetes/typed/rbac/v1beta1 +k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1 k8s.io/client-go/kubernetes/typed/autoscaling/v2 -k8s.io/client-go/kubernetes/typed/flowcontrol/v1 k8s.io/client-go/kubernetes/typed/flowcontrol/v1beta1 -k8s.io/client-go/applyconfigurations/events/v1 +k8s.io/client-go/kubernetes/typed/rbac/v1 +k8s.io/client-go/kubernetes/typed/flowcontrol/v1 +k8s.io/client-go/kubernetes/typed/admissionregistration/v1 +k8s.io/client-go/applyconfigurations/admissionregistration/v1beta1 +k8s.io/client-go/applyconfigurations/admissionregistration/v1alpha1 +k8s.io/client-go/kubernetes/typed/admissionregistration/v1alpha1 +k8s.io/client-go/kubernetes/typed/admissionregistration/v1beta1 k8s.io/client-go/applyconfigurations/discovery/v1 -k8s.io/client-go/applyconfigurations/apps/v1beta1 -k8s.io/client-go/applyconfigurations/events/v1beta1 +k8s.io/client-go/applyconfigurations/events/v1 k8s.io/client-go/applyconfigurations/discovery/v1beta1 +k8s.io/client-go/applyconfigurations/events/v1beta1 +k8s.io/client-go/applyconfigurations/node/v1 k8s.io/client-go/applyconfigurations/node/v1beta1 k8s.io/client-go/applyconfigurations/node/v1alpha1 -k8s.io/client-go/applyconfigurations/node/v1 -k8s.io/client-go/kubernetes/typed/core/v1 -k8s.io/client-go/applyconfigurations/apps/v1beta2 +k8s.io/client-go/applyconfigurations/apps/v1beta1 +k8s.io/client-go/applyconfigurations/storage/v1alpha1 +k8s.io/client-go/applyconfigurations/storage/v1beta1 +k8s.io/client-go/applyconfigurations/batch/v1 k8s.io/client-go/applyconfigurations/networking/v1beta1 k8s.io/client-go/applyconfigurations/networking/v1 k8s.io/client-go/applyconfigurations/storage/v1 -k8s.io/client-go/applyconfigurations/batch/v1 -k8s.io/client-go/applyconfigurations/storage/v1alpha1 +k8s.io/client-go/kubernetes/typed/core/v1 k8s.io/client-go/applyconfigurations/apps/v1 -k8s.io/client-go/applyconfigurations/storage/v1beta1 -k8s.io/client-go/applyconfigurations/resource/v1alpha3 +k8s.io/client-go/applyconfigurations/apps/v1beta2 k8s.io/client-go/applyconfigurations/resource/v1beta1 +k8s.io/client-go/applyconfigurations/resource/v1alpha3 k8s.io/client-go/applyconfigurations/extensions/v1beta1 +k8s.io/client-go/kubernetes/typed/discovery/v1beta1 k8s.io/client-go/kubernetes/typed/discovery/v1 +k8s.io/client-go/kubernetes/typed/node/v1beta1 k8s.io/client-go/kubernetes/typed/events/v1 +k8s.io/client-go/kubernetes/typed/storage/v1alpha1 k8s.io/client-go/kubernetes/typed/events/v1beta1 k8s.io/client-go/kubernetes/typed/node/v1alpha1 -k8s.io/client-go/kubernetes/typed/node/v1beta1 -k8s.io/client-go/kubernetes/typed/discovery/v1beta1 k8s.io/client-go/kubernetes/typed/node/v1 -k8s.io/client-go/kubernetes/typed/storage/v1alpha1 -k8s.io/client-go/kubernetes/typed/networking/v1 k8s.io/client-go/kubernetes/typed/networking/v1beta1 k8s.io/client-go/kubernetes/typed/apps/v1beta1 -k8s.io/client-go/kubernetes/typed/storage/v1beta1 -k8s.io/client-go/applyconfigurations/batch/v1beta1 k8s.io/client-go/kubernetes/typed/batch/v1 +k8s.io/client-go/applyconfigurations/batch/v1beta1 k8s.io/client-go/kubernetes/typed/resource/v1beta1 +k8s.io/client-go/kubernetes/typed/networking/v1 k8s.io/client-go/kubernetes/typed/storage/v1 +k8s.io/client-go/kubernetes/typed/storage/v1beta1 k8s.io/client-go/kubernetes/typed/resource/v1alpha3 k8s.io/client-go/kubernetes/typed/apps/v1beta2 -k8s.io/client-go/kubernetes/typed/extensions/v1beta1 k8s.io/client-go/kubernetes/typed/apps/v1 +k8s.io/client-go/kubernetes/typed/extensions/v1beta1 k8s.io/client-go/kubernetes/typed/batch/v1beta1 k8s.io/client-go/kubernetes github.com/sigstore/cosign/pkg/cosign/kubernetes github.com/sigstore/cosign/pkg/signature github.com/sigstore/cosign/cmd/cosign/cli/options -github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/cosign/cmd/cosign/cli/rekor github.com/sigstore/cosign/cmd/cosign/cli/initialize github.com/sigstore/cosign/cmd/cosign/cli/fulcio +github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier -github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/cosign/cmd/cosign/cli/sign +github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/root -github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign +github.com/sigstore/gitsign/docs/cli dh_auto_test -O--builddirectory=_build -O--buildsystem=golang - cd _build && go test -vet=off -v -p 42 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version + cd _build && go test -vet=off -v -p 40 github.com/sigstore/gitsign github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal github.com/sigstore/gitsign/internal/attest github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/cache/api github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/internal/cert github.com/sigstore/gitsign/internal/commands/attest github.com/sigstore/gitsign/internal/commands/initialize github.com/sigstore/gitsign/internal/commands/root github.com/sigstore/gitsign/internal/commands/show github.com/sigstore/gitsign/internal/commands/verify github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/config github.com/sigstore/gitsign/internal/fork/ietf-cms github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/fulcio/fulcioroots github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/io github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/internal/rekor/oid github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/pkg/gitsign github.com/sigstore/gitsign/pkg/predicate github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/pkg/version ? github.com/sigstore/gitsign [no test files] ? github.com/sigstore/gitsign/cmd/gitsign-credential-cache [no test files] ? github.com/sigstore/gitsign/docs/cli [no test files] === RUN TestStripUrl --- PASS: TestStripUrl (0.00s) PASS -ok github.com/sigstore/gitsign/internal 0.017s +ok github.com/sigstore/gitsign/internal 0.005s === RUN TestAttestCommitRef === RUN TestAttestCommitRef/base LogEntry ID foo 1 @@ -4509,8 +4545,8 @@ LogEntry ID foo 1 === RUN TestAttestCommitRef/new_commit LogEntry ID foo 1 ---- PASS: TestAttestCommitRef (0.05s) - --- PASS: TestAttestCommitRef/base (0.01s) +--- PASS: TestAttestCommitRef (0.00s) + --- PASS: TestAttestCommitRef/base (0.00s) --- PASS: TestAttestCommitRef/noop (0.00s) --- PASS: TestAttestCommitRef/new_commit (0.00s) === RUN TestAttestTreeRef @@ -4522,23 +4558,23 @@ LogEntry ID foo 1 === RUN TestAttestTreeRef/new_commit_new_tree LogEntry ID foo 1 ---- PASS: TestAttestTreeRef (0.01s) +--- PASS: TestAttestTreeRef (0.00s) --- PASS: TestAttestTreeRef/base (0.00s) --- PASS: TestAttestTreeRef/noop (0.00s) --- PASS: TestAttestTreeRef/new_commit_same_tree (0.00s) --- PASS: TestAttestTreeRef/new_commit_new_tree (0.00s) PASS -ok github.com/sigstore/gitsign/internal/attest 0.158s +ok github.com/sigstore/gitsign/internal/attest 0.041s === RUN TestCache -Get ionos15-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache -Store ionos15-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache -Get ionos15-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Get i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Store i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Get i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache gitsign-credential-cache: found credential! -Get ionos15-amd64@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache +Get i-capture-the-hostname@/build/reproducible-path/gitsign-0.13.0/_build/src/github.com/sigstore/gitsign/internal/cache gitsign-credential-cache: found credential! ---- PASS: TestCache (1.46s) +--- PASS: TestCache (0.38s) PASS -ok github.com/sigstore/gitsign/internal/cache 1.492s +ok github.com/sigstore/gitsign/internal/cache 0.392s ? github.com/sigstore/gitsign/internal/cache/api [no test files] ? github.com/sigstore/gitsign/internal/cache/service [no test files] ? github.com/sigstore/gitsign/internal/cert [no test files] @@ -4552,26 +4588,26 @@ --- PASS: TestShow/fulcio-cert (0.00s) --- PASS: TestShow/gpg (0.00s) PASS -ok github.com/sigstore/gitsign/internal/commands/show 0.029s +ok github.com/sigstore/gitsign/internal/commands/show 0.010s ? github.com/sigstore/gitsign/internal/commands/verify [no test files] ? github.com/sigstore/gitsign/internal/commands/verify-tag [no test files] ? github.com/sigstore/gitsign/internal/commands/version [no test files] === RUN TestGet --- PASS: TestGet (0.00s) PASS -ok github.com/sigstore/gitsign/internal/config 0.039s +ok github.com/sigstore/gitsign/internal/config 0.010s === RUN TestSign ---- PASS: TestSign (0.01s) +--- PASS: TestSign (0.00s) === RUN TestSignDetached --- PASS: TestSignDetached (0.00s) === RUN TestSignDetachedWithOpenSSL ---- PASS: TestSignDetachedWithOpenSSL (1.30s) +--- PASS: TestSignDetachedWithOpenSSL (0.01s) === RUN TestSignRemoveHeaders --- PASS: TestSignRemoveHeaders (0.00s) === RUN TestAddTimestamps ---- PASS: TestAddTimestamps (0.06s) +--- PASS: TestAddTimestamps (0.02s) === RUN TestTimestampsVerifications ---- PASS: TestTimestampsVerifications (0.60s) +--- PASS: TestTimestampsVerifications (0.41s) === RUN TestVerify --- PASS: TestVerify (0.00s) === RUN TestVerifyGPGSMAttached @@ -4585,11 +4621,11 @@ === RUN TestVerifyOpenSSLDetached --- PASS: TestVerifyOpenSSLDetached (0.00s) === RUN TestVerifyChain ---- PASS: TestVerifyChain (0.12s) +--- PASS: TestVerifyChain (0.02s) === RUN TestVerifyDSAWithSHA1 --- PASS: TestVerifyDSAWithSHA1 (0.00s) PASS -ok github.com/sigstore/gitsign/internal/fork/ietf-cms 7.207s +ok github.com/sigstore/gitsign/internal/fork/ietf-cms 1.816s === RUN TestRequestDo --- PASS: TestRequestDo (0.00s) === RUN TestRequestMatches @@ -4615,33 +4651,33 @@ === RUN TestParseTimestampGlobalSign --- PASS: TestParseTimestampGlobalSign (0.00s) PASS -ok github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp 0.033s +ok github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp 0.009s ? github.com/sigstore/gitsign/internal/fulcio [no test files] === RUN TestNew === RUN TestNew/FromFile === RUN TestNew/Static === RUN TestNew/None ---- PASS: TestNew (1.05s) +--- PASS: TestNew (0.23s) --- PASS: TestNew/FromFile (0.00s) --- PASS: TestNew/Static (0.00s) --- PASS: TestNew/None (0.00s) PASS -ok github.com/sigstore/gitsign/internal/fulcio/fulcioroots 1.079s +ok github.com/sigstore/gitsign/internal/fulcio/fulcioroots 0.239s ? github.com/sigstore/gitsign/internal/git [no test files] ? github.com/sigstore/gitsign/internal/git/gittest [no test files] === RUN TestVerify ---- PASS: TestVerify (0.02s) +--- PASS: TestVerify (0.01s) PASS -ok github.com/sigstore/gitsign/internal/gitsign 0.166s +ok github.com/sigstore/gitsign/internal/gitsign 0.041s ? github.com/sigstore/gitsign/internal/gpg [no test files] ? github.com/sigstore/gitsign/internal/io [no test files] ? github.com/sigstore/gitsign/internal/rekor [no test files] === RUN TestOID ---- PASS: TestOID (0.01s) +--- PASS: TestOID (0.00s) === RUN TestConvert --- PASS: TestConvert (0.00s) PASS -ok github.com/sigstore/gitsign/internal/rekor/oid 0.062s +ok github.com/sigstore/gitsign/internal/rekor/oid 0.016s === RUN TestMatchSAN === RUN TestMatchSAN/email_match === RUN TestMatchSAN/uri_match @@ -4651,7 +4687,7 @@ --- PASS: TestMatchSAN/uri_match (0.00s) --- PASS: TestMatchSAN/no_match (0.00s) PASS -ok github.com/sigstore/gitsign/internal/signature 0.086s +ok github.com/sigstore/gitsign/internal/signature 0.021s ? github.com/sigstore/gitsign/internal/signerverifier [no test files] === RUN TestKeyAlgorithm === RUN TestKeyAlgorithm/ecdsa @@ -4662,9 +4698,9 @@ --- PASS: TestKeyAlgorithm/fulcio (0.00s) --- PASS: TestKeyAlgorithm/#00 (0.00s) === RUN TestGetCert ---- PASS: TestGetCert (0.01s) +--- PASS: TestGetCert (0.00s) PASS -ok github.com/sigstore/gitsign/pkg/fulcio 0.031s +ok github.com/sigstore/gitsign/pkg/fulcio 0.008s === RUN TestObjectHash === RUN TestObjectHash/tag === RUN TestObjectHash/commit @@ -4678,15 +4714,15 @@ === RUN TestSignVerify/detached(false) === RUN TestSignVerify/detached(false)/VerifySignature === RUN TestSignVerify/detached(false)/CertVerifier.Verify ---- PASS: TestSignVerify (0.62s) - --- PASS: TestSignVerify/detached(true) (0.01s) +--- PASS: TestSignVerify (0.25s) + --- PASS: TestSignVerify/detached(true) (0.00s) --- PASS: TestSignVerify/detached(true)/VerifySignature (0.00s) --- PASS: TestSignVerify/detached(true)/CertVerifier.Verify (0.00s) - --- PASS: TestSignVerify/detached(false) (0.01s) + --- PASS: TestSignVerify/detached(false) (0.00s) --- PASS: TestSignVerify/detached(false)/VerifySignature (0.00s) --- PASS: TestSignVerify/detached(false)/CertVerifier.Verify (0.00s) PASS -ok github.com/sigstore/gitsign/pkg/git 0.712s +ok github.com/sigstore/gitsign/pkg/git 0.275s ? github.com/sigstore/gitsign/pkg/gitsign [no test files] ? github.com/sigstore/gitsign/pkg/predicate [no test files] ? github.com/sigstore/gitsign/pkg/rekor [no test files] @@ -4695,7 +4731,7 @@ === RUN TestEnv --- PASS: TestEnv (0.00s) PASS -ok github.com/sigstore/gitsign/pkg/version 0.026s +ok github.com/sigstore/gitsign/pkg/version 0.004s create-stamp debian/debhelper-build-stamp dh_testroot -O--builddirectory=_build -O--buildsystem=golang dh_prep -O--builddirectory=_build -O--buildsystem=golang @@ -4743,9 +4779,9 @@ dh_gencontrol -O--builddirectory=_build -O--buildsystem=golang dh_md5sums -O--builddirectory=_build -O--buildsystem=golang dh_builddeb -O--builddirectory=_build -O--buildsystem=golang -dpkg-deb: building package 'gitsign' in '../gitsign_0.13.0-2_amd64.deb'. -dpkg-deb: building package 'golang-github-sigstore-gitsign-dev' in '../golang-github-sigstore-gitsign-dev_0.13.0-2_all.deb'. dpkg-deb: building package 'gitsign-dbgsym' in '../gitsign-dbgsym_0.13.0-2_amd64.deb'. +dpkg-deb: building package 'golang-github-sigstore-gitsign-dev' in '../golang-github-sigstore-gitsign-dev_0.13.0-2_all.deb'. +dpkg-deb: building package 'gitsign' in '../gitsign_0.13.0-2_amd64.deb'. dpkg-genbuildinfo --build=binary -O../gitsign_0.13.0-2_amd64.buildinfo dpkg-genchanges --build=binary -O../gitsign_0.13.0-2_amd64.changes dpkg-genchanges: info: binary-only upload (no source code included) @@ -4753,12 +4789,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/2647571/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/2097867 and its subdirectories -I: Current time: Mon Aug 24 03:45:51 -12 2026 -I: pbuilder-time-stamp: 1787586351 +I: removing directory /srv/workspace/pbuilder/2647571 and its subdirectories +I: Current time: Tue Jul 22 23:27:57 +14 2025 +I: pbuilder-time-stamp: 1753176477