https://github.com/sigstore/sigstore
cosign go golang security sigstore supply-chain
Score: 30.560969524386937
Last synced: about 12 hours ago
JSON representation
Repository metadata:
Common go library shared across sigstore services and clients
- Host: GitHub
- URL: https://github.com/sigstore/sigstore
- Owner: sigstore
- License: apache-2.0
- Created: 2021-02-13T17:48:28.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2026-08-19T19:13:38.000Z (7 days ago)
- Last Synced: 2026-08-22T09:56:22.790Z (5 days ago)
- Topics: cosign, go, golang, security, sigstore, supply-chain
- Language: Go
- Homepage: https://sigstore.dev
- Size: 4.4 MB
- Stars: 535
- Watchers: 13
- Forks: 158
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: CODEOWNERS
- Copyright: COPYRIGHT.txt
Owner metadata:
- Name: sigstore
- Login: sigstore
- Email: info@sigstore.dev
- Kind: organization
- Description: Software Supply Chain Security
- Website: https://sigstore.dev
- Location: United States of America
- Twitter: projectsigstore
- Company:
- Icon url: https://avatars.githubusercontent.com/u/71096353?v=4
- Repositories: 50
- Last Synced at: 2023-03-03T19:42:33.042Z
- Profile URL: https://github.com/sigstore
GitHub Events
Total
- Commit comment event: 2
- Create event: 318
- Delete event: 239
- Fork event: 20
- Issue comment event: 230
- Issues event: 49
- Pull request event: 612
- Pull request review comment event: 200
- Pull request review event: 430
- Push event: 426
- Release event: 13
- Watch event: 55
- Total: 2594
Last Year
- Commit comment event: 1
- Create event: 82
- Delete event: 69
- Fork event: 3
- Issue comment event: 29
- Issues event: 4
- Pull request event: 172
- Pull request review event: 41
- Push event: 101
- Release event: 2
- Watch event: 11
- Total: 515
Committers metadata
Last synced: 7 days ago
Total Commits: 1,981
Total Committers: 89
Avg Commits per committer: 22.258
Development Distribution Score (DDS): 0.209
Commits in past year: 154
Committers in past year: 19
Avg Commits per committer in past year: 8.105
Development Distribution Score (DDS) in past year: 0.214
| Name | Commits | |
|---|---|---|
| dependabot[bot] | 4****] | 1567 |
| Bob Callaway | b****y | 62 |
| Hayden B | h****n@g****m | 40 |
| Carlos Tadeu Panato Junior | c****u@g****m | 37 |
| Luke Hinds | l****s@r****m | 32 |
| Jake Sanders | j****d@g****m | 29 |
| Naveen | 1****n | 21 |
| Luke Hinds | 7****s | 17 |
| dlorenc | d****c@g****m | 13 |
| Ramon Petgrave | 3****4 | 11 |
| Jason Hall | j****n@c****v | 9 |
| Meredith Lancaster | m****s | 8 |
| Billy Lynch | b****y@c****v | 8 |
| Fredrik Skogman | k****n@g****m | 7 |
| Hayden | 8****O | 6 |
| Riccardo Schirone | 5****c | 6 |
| Kenny Leung | k****g@c****v | 5 |
| Jake Sanders | j****e@s****v | 5 |
| asraa | a****a@g****m | 5 |
| Furkan Türkal | f****l@t****m | 4 |
| priyawadhwa | p****a@g****m | 3 |
| Miloslav Trmač | m****r@r****m | 3 |
| Aditya Sirish | 8****y | 3 |
| Zack Newman | z****n@c****v | 3 |
| Batuhan Apaydın | b****n@t****m | 2 |
| Cody Soyland | c****d@g****m | 2 |
| mikey strauss | m****1@g****m | 2 |
| dlorenc | l****d@g****m | 2 |
| Ville Aikas | 1****s | 2 |
| Sueun Cho | s****v@g****m | 2 |
| and 59 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 73
Total pull requests: 1,047
Average time to close issues: about 1 year
Average time to close pull requests: 12 days
Total issue authors: 48
Total pull request authors: 59
Average comments per issue: 2.14
Average comments per pull request: 0.57
Merged pull request: 733
Bot issues: 2
Bot pull requests: 871
Past year issues: 7
Past year pull requests: 112
Past year average time to close issues: about 2 months
Past year average time to close pull requests: 24 days
Past year issue authors: 7
Past year pull request authors: 15
Past year average comments per issue: 1.71
Past year average comments per pull request: 0.74
Past year merged pull request: 59
Past year bot issues: 0
Past year bot pull requests: 90
Top Issue Authors
- haydentherapper (6)
- bobcallaway (5)
- jku (5)
- ramonpetgrave64 (4)
- asraa (4)
- dependabot[bot] (2)
- jas4711 (2)
- arthurus-rex (2)
- ret2libc (2)
- naveensrinivasan (2)
- lukehinds (2)
- znewman01 (1)
- ejahnGithub (1)
- SolvensAmoris (1)
- xnox (1)
Top Pull Request Authors
- dependabot[bot] (871)
- bobcallaway (24)
- haydentherapper (21)
- ramonpetgrave64 (20)
- ret2libc (12)
- cpanato (11)
- Hayden-IO (8)
- malancas (6)
- codysoyland (4)
- naveensrinivasan (3)
- nkreiger (3)
- mozillazg (3)
- adityasaky (2)
- cmurphy (2)
- tetsuo-cpp (2)
Top Issue Labels
- enhancement (40)
- bug (26)
- dependencies (2)
- go (2)
- question (1)
Top Pull Request Labels
- dependencies (871)
- go (702)
- github_actions (107)
- docker (62)
Package metadata
- Total packages: 22
- Total downloads: unknown
- Total docker downloads: 388,929,195
- Total dependent packages: 642 (may contain duplicates)
- Total dependent repositories: 1,266 (may contain duplicates)
- Total versions: 597
- Total advisories: 1
proxy.golang.org: github.com/sigstore/sigstore
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore#section-documentation
- Licenses: apache-2.0
- Latest release: v1.10.9 (published 26 days ago)
- Last Synced: 2026-08-25T11:10:57.586Z (1 day ago)
- Versions: 61
- Dependent Packages: 539
- Dependent Repositories: 1,014
- Docker Downloads: 385,433,283
-
Rankings:
- Docker downloads count: 0.184%
- Dependent packages count: 0.204%
- Dependent repos count: 0.243%
- Average: 1.279%
- Forks count: 2.847%
- Stargazers count: 2.915%
- Advisories:
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/kms/hashivault#section-documentation
- Licenses: apache-2.0
- Latest release: v1.10.9 (published 26 days ago)
- Last Synced: 2026-08-25T11:11:19.103Z (1 day ago)
- Versions: 39
- Dependent Packages: 25
- Dependent Repositories: 63
- Docker Downloads: 873,978
-
Rankings:
- Dependent repos count: 0.733%
- Docker downloads count: 1.848%
- Forks count: 2.599%
- Stargazers count: 2.81%
- Average: 3.289%
- Dependent packages count: 8.453%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/kms/gcp
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/kms/gcp#section-documentation
- Licenses: apache-2.0
- Latest release: v1.10.9 (published 26 days ago)
- Last Synced: 2026-08-24T11:32:59.653Z (3 days ago)
- Versions: 39
- Dependent Packages: 26
- Dependent Repositories: 63
- Docker Downloads: 873,978
-
Rankings:
- Dependent repos count: 0.733%
- Docker downloads count: 1.848%
- Forks count: 2.599%
- Stargazers count: 2.81%
- Average: 3.289%
- Dependent packages count: 8.453%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/kms/azure
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/kms/azure#section-documentation
- Licenses: apache-2.0
- Latest release: v1.10.9 (published 26 days ago)
- Last Synced: 2026-08-25T11:10:53.239Z (1 day ago)
- Versions: 39
- Dependent Packages: 26
- Dependent Repositories: 63
- Docker Downloads: 873,978
-
Rankings:
- Dependent repos count: 0.733%
- Docker downloads count: 1.848%
- Forks count: 2.599%
- Stargazers count: 2.81%
- Average: 3.289%
- Dependent packages count: 8.453%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/kms/aws
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/kms/aws#section-documentation
- Licenses: apache-2.0
- Latest release: v1.10.9 (published 26 days ago)
- Last Synced: 2026-08-24T11:16:56.538Z (3 days ago)
- Versions: 39
- Dependent Packages: 26
- Dependent Repositories: 63
- Docker Downloads: 873,978
-
Rankings:
- Dependent repos count: 0.733%
- Docker downloads count: 1.848%
- Forks count: 2.599%
- Stargazers count: 2.81%
- Average: 3.289%
- Dependent packages count: 8.453%
proxy.golang.org: github.com/Sigstore/sigstore
- Homepage:
- Documentation: https://pkg.go.dev/github.com/Sigstore/sigstore#section-documentation
- Licenses: apache-2.0
- Latest release: v1.10.9 (published 26 days ago)
- Last Synced: 2026-08-25T11:11:26.914Z (1 day ago)
- Versions: 60
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.678%
- Average: 4.835%
- Dependent repos count: 4.992%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature
Package signature contains types and utilities related to Sigstore signatures.
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.10.6 (published 3 months ago)
- Last Synced: 2026-08-25T11:14:23.145Z (1 day ago)
- Versions: 50
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.748%
- Average: 4.908%
- Dependent repos count: 5.067%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/options
Package options defines options for KMS clients Package options contains functional options for the various SignerVerifiers
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/options#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.10.6 (published 3 months ago)
- Last Synced: 2026-08-25T11:13:42.975Z (1 day ago)
- Versions: 51
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/sigstore/sigstore/pkg/oauthflow
Package oauthflow implements OAuth/OIDC support for device and token flows Package oauthflow contains utilities to obtain OAuth2/OIDC tokens.
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/oauthflow#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.10.6 (published 3 months ago)
- Last Synced: 2026-08-24T11:39:13.054Z (2 days ago)
- Versions: 51
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/sigstore/sigstore/pkg/oauth
Package oauth contains types and utilities related to OAuth2. Package oauth implements OAuth/OIDC support for device and token flows
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/oauth#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.10.6 (published 3 months ago)
- Last Synced: 2026-08-24T11:37:31.534Z (2 days ago)
- Versions: 51
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/sigstore/sigstore/pkg/cryptoutils
Package cryptoutils implements support for working with encoded certificates, public keys, and private keys Package cryptoutils contains utilities related to handling cryptographic materials.
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/cryptoutils#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.10.6 (published 3 months ago)
- Last Synced: 2026-08-25T11:10:04.508Z (1 day ago)
- Versions: 51
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/payload
Package payload contains types and utilities related to the Cosign signature format. Package payload defines a container image
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/payload#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.10.6 (published 3 months ago)
- Last Synced: 2026-08-25T11:11:00.231Z (1 day ago)
- Versions: 51
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/sigstore/sigstore/test/fuzz
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/test/fuzz#section-documentation
- Licenses: apache-2.0
- Latest release: v0.0.0-20220808195629-f5a8a4b14d7c (published about 4 years ago)
- Last Synced: 2026-08-24T11:19:08.031Z (3 days ago)
- Versions: 8
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Forks count: 1.865%
- Stargazers count: 1.889%
- Average: 5.025%
- Dependent packages count: 6.999%
- Dependent repos count: 9.346%
proxy.golang.org: github.com/sigstore/sigstore/pkg/signature/kms/cliplugin
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://pkg.go.dev/github.com/sigstore/sigstore/pkg/signature/kms/cliplugin#section-documentation
- Licenses: apache-2.0
- Latest release: (published 1 day ago)
- Last Synced: 2026-08-25T11:11:32.909Z (1 day ago)
- Versions: 0
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 5.775%
- Average: 5.969%
- Dependent repos count: 6.162%
proxy.golang.org: github.com/bobcallaway/sigstore
- Homepage: https://github.com/sigstore/sigstore
- Status: removed
- Documentation: https://pkg.go.dev/github.com/bobcallaway/sigstore#section-documentation
- Licenses: Apache-2.0
- Latest release: (published 3 months ago)
- Last Synced: 2026-08-25T11:11:04.347Z (1 day ago)
- Versions: 0
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 6.999%
- Average: 8.173%
- Dependent repos count: 9.346%
ubuntu-24.10: golang-github-sigstore-sigstore
- Homepage: https://github.com/sigstore/sigstore
- Licenses: apache-2.0
- Latest release: 1.8.6-1 (published 7 months ago)
- Last Synced: 2026-03-08T16:48:33.008Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: go-github-com-sigstore-sigstore-pkg-signature-kms-aws
Utilities related to AWS KMS
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n16350
- Licenses: asl2.0
- Latest release: 1.10.5 (published 4 months ago)
- Last Synced: 2026-04-15T07:23:03.893Z (4 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-13: golang-github-sigstore-sigstore
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://packages.debian.org/trixie/golang-github-sigstore-sigstore
- Licenses: apache-2.0
- Latest release: 1.9.3-2 (published 7 months ago)
- Last Synced: 2026-03-13T19:18:20.305Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: go-github-com-sigstore-sigstore-pkg-signature-kms-azure
Utilities related to Microsoft Azure KMS
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n16399
- Licenses: asl2.0
- Latest release: 1.10.5 (published 4 months ago)
- Last Synced: 2026-04-15T07:23:10.419Z (4 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: go-github-com-sigstore-sigstore-pkg-signature-kms-gcp
Utilities related to Google Cloud Platform KMS
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n16450
- Licenses: asl2.0
- Latest release: 1.10.5 (published 4 months ago)
- Last Synced: 2026-04-15T07:23:03.294Z (4 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: go-github-com-sigstore-sigstore-pkg-signature-kms-hashivault
Utilities related to Hashivault KMS
- Homepage: https://github.com/sigstore/sigstore
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n16498
- Licenses: asl2.0
- Latest release: 1.10.5 (published 4 months ago)
- Last Synced: 2026-04-15T07:23:06.306Z (4 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-24.04: golang-github-sigstore-sigstore
- Homepage: https://github.com/sigstore/sigstore
- Licenses: apache-2.0
- Latest release: 1.8.0-2 (published 7 months ago)
- Last Synced: 2026-08-13T23:28:07.459Z (13 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
.github/workflows/codeql.yml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- github/codeql-action/analyze 515828d97454b8354517688ddc5b48402b723750 composite
- github/codeql-action/autobuild 515828d97454b8354517688ddc5b48402b723750 composite
- github/codeql-action/init 515828d97454b8354517688ddc5b48402b723750 composite
.github/workflows/depsreview.yml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/dependency-review-action c090f4e553673e6e505ea70d6a95362ee12adb94 composite
.github/workflows/e2e_test.yml
actions
- actions/cache 58c146cc91c5b9e778e71775dfe9bf1442ad9a12 composite
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
.github/workflows/fuzzing.yml
actions
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- google/oss-fuzz/infra/cifuzz/actions/build_fuzzers master composite
- google/oss-fuzz/infra/cifuzz/actions/run_fuzzers master composite
.github/workflows/test.yml
actions
- actions/cache 58c146cc91c5b9e778e71775dfe9bf1442ad9a12 composite
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
.github/workflows/verify.yml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
- golangci/golangci-lint-action 0ad9a0988b3973e851ab0a07adf248ec2e100376 composite
test/e2e/docker-compose.yml
docker
- ghcr.io/dexidp/dex v2.31.0
- localstack/localstack 0.12.16
- vault latest
go.mod
go
- cloud.google.com/go/compute v1.14.0
- cloud.google.com/go/compute/metadata v0.2.3
- cloud.google.com/go/iam v0.8.0
- cloud.google.com/go/kms v1.8.0
- github.com/Azure/azure-sdk-for-go v67.3.0+incompatible
- github.com/Azure/go-autorest v14.2.0+incompatible
- github.com/Azure/go-autorest/autorest v0.11.28
- github.com/Azure/go-autorest/autorest/adal v0.9.21
- github.com/Azure/go-autorest/autorest/azure/auth v0.5.11
- github.com/Azure/go-autorest/autorest/azure/cli v0.4.6
- github.com/Azure/go-autorest/autorest/date v0.3.0
- github.com/Azure/go-autorest/autorest/to v0.4.0
- github.com/Azure/go-autorest/autorest/validation v0.3.1
- github.com/Azure/go-autorest/logger v0.2.1
- github.com/Azure/go-autorest/tracing v0.6.0
- github.com/armon/go-metrics v0.4.1
- github.com/armon/go-radix v1.0.0
- github.com/aws/aws-sdk-go v1.44.180
- github.com/aws/aws-sdk-go-v2 v1.17.3
- github.com/aws/aws-sdk-go-v2/config v1.18.8
- github.com/aws/aws-sdk-go-v2/credentials v1.13.8
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.21
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.27
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.21
- github.com/aws/aws-sdk-go-v2/internal/ini v1.3.28
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.21
- github.com/aws/aws-sdk-go-v2/service/kms v1.20.0
- github.com/aws/aws-sdk-go-v2/service/sso v1.12.0
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.0
- github.com/aws/aws-sdk-go-v2/service/sts v1.18.0
- github.com/aws/smithy-go v1.13.5
- github.com/cenkalti/backoff/v3 v3.2.2
- github.com/coreos/go-oidc/v3 v3.5.0
- github.com/davecgh/go-spew v1.1.1
- github.com/dimchansky/utfbom v1.1.1
- github.com/fatih/color v1.13.0
- github.com/go-jose/go-jose/v3 v3.0.0
- github.com/go-rod/rod v0.112.3
- github.com/go-test/deep v1.1.0
- github.com/golang-jwt/jwt/v4 v4.4.2
- github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
- github.com/golang/protobuf v1.5.2
- github.com/golang/snappy v0.0.4
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.12.1
- github.com/googleapis/enterprise-certificate-proxy v0.2.1
- github.com/googleapis/gax-go/v2 v2.7.0
- github.com/hashicorp/errwrap v1.1.0
- github.com/hashicorp/go-cleanhttp v0.5.2
- github.com/hashicorp/go-hclog v1.3.1
- github.com/hashicorp/go-immutable-radix v1.3.1
- github.com/hashicorp/go-multierror v1.1.1
- github.com/hashicorp/go-plugin v1.4.6
- github.com/hashicorp/go-retryablehttp v0.7.1
- github.com/hashicorp/go-rootcerts v1.0.2
- github.com/hashicorp/go-secure-stdlib/mlock v0.1.2
- github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7
- github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
- github.com/hashicorp/go-sockaddr v1.0.2
- github.com/hashicorp/go-uuid v1.0.3
- github.com/hashicorp/go-version v1.6.0
- github.com/hashicorp/golang-lru v0.5.4
- github.com/hashicorp/hcl v1.0.0
- github.com/hashicorp/vault/api v1.8.2
- github.com/hashicorp/vault/sdk v0.6.1
- github.com/hashicorp/yamux v0.1.1
- github.com/jellydator/ttlcache/v2 v2.11.1
- github.com/jhump/protoreflect v1.14.0
- github.com/jmespath/go-jmespath v0.4.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/mattn/go-colorable v0.1.13
- github.com/mattn/go-isatty v0.0.16
- github.com/mitchellh/copystructure v1.2.0
- github.com/mitchellh/go-homedir v1.1.0
- github.com/mitchellh/go-testing-interface v1.14.1
- github.com/mitchellh/mapstructure v1.5.0
- github.com/mitchellh/reflectwalk v1.0.2
- github.com/oklog/run v1.1.0
- github.com/opencontainers/go-digest v1.0.0
- github.com/pierrec/lz4 v2.6.1+incompatible
- github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8
- github.com/pmezard/go-difflib v1.0.0
- github.com/ryanuber/go-glob v1.0.0
- github.com/secure-systems-lab/go-securesystemslib v0.4.0
- github.com/segmentio/ksuid v1.0.4
- github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
- github.com/stretchr/testify v1.8.1
- github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d
- github.com/theupdateframework/go-tuf v0.5.2-0.20220930112810-3890c1e7ace4
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- github.com/ysmood/goob v0.4.0
- github.com/ysmood/gson v0.7.3
- github.com/ysmood/leakless v0.8.0
- go.opencensus.io v0.24.0
- go.uber.org/atomic v1.10.0
- golang.org/x/crypto v0.5.0
- golang.org/x/net v0.5.0
- golang.org/x/oauth2 v0.4.0
- golang.org/x/sync v0.1.0
- golang.org/x/sys v0.4.0
- golang.org/x/term v0.4.0
- golang.org/x/text v0.6.0
- golang.org/x/time v0.2.0
- google.golang.org/api v0.107.0
- google.golang.org/appengine v1.6.7
- google.golang.org/genproto v0.0.0-20221227171554-f9683d7f8bef
- google.golang.org/grpc v1.51.0
- google.golang.org/protobuf v1.28.1
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v3 v3.0.1
go.sum
go
- 445 dependencies
hack/tools/go.mod
go
- github.com/AdaLogics/go-fuzz-headers v0.0.0-20211123104302-8fea106b46e2
- github.com/containerd/stargz-snapshotter/estargz v0.10.0
- github.com/cyphar/filepath-securejoin v0.2.3
- github.com/dvyukov/go-fuzz v0.0.0-20210914135545-4980593459a1
- github.com/elazarl/go-bindata-assetfs v1.0.1
- github.com/google/go-containerregistry v0.7.0
- github.com/klauspost/compress v1.13.6
- github.com/opencontainers/go-digest v1.0.0
- github.com/opencontainers/image-spec v1.0.2
- github.com/pkg/errors v0.9.1
- github.com/stephens2424/writerset v1.0.2
- github.com/vbatts/tar-split v0.11.2
- golang.org/x/mod v0.5.1
- golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
- golang.org/x/sys v0.0.0-20211110154304-99a53858aa08
- golang.org/x/tools v0.1.7
- golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1
hack/tools/go.sum
go
- 1275 dependencies
test/fuzz/go.mod
go
- github.com/AdaLogics/go-fuzz-headers v0.0.0-20211102141018-f7be0cbad29c
- github.com/cyphar/filepath-securejoin v0.2.3
- github.com/dvyukov/go-fuzz v0.0.0-20210914135545-4980593459a1
- github.com/elazarl/go-bindata-assetfs v1.0.1
- github.com/golang/protobuf v1.5.2
- github.com/google/go-containerregistry v0.10.0
- github.com/letsencrypt/boulder v0.0.0-20220331220046-b23ab962616e
- github.com/secure-systems-lab/go-securesystemslib v0.4.0
- github.com/sigstore/sigstore v1.3.0
- github.com/stephens2424/writerset v1.0.2
- github.com/theupdateframework/go-tuf v0.3.0
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- golang.org/x/crypto v0.0.0-20220131195533-30dcbda58838
- golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3
- golang.org/x/net v0.0.0-20220617184016-355a448f1bc9
- golang.org/x/sys v0.0.0-20220615213510-4f61da869c0c
- golang.org/x/term v0.0.0-20210927222741-03fcf44c2211
- golang.org/x/text v0.3.7
- golang.org/x/tools v0.1.10
- golang.org/x/xerrors v0.0.0-20220517211312-f3a8303e98df
- google.golang.org/genproto v0.0.0-20220617124728-180714bec0ad
- google.golang.org/grpc v1.47.0
- google.golang.org/protobuf v1.28.0
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v2 v2.4.0
test/fuzz/go.sum
go
- 240 dependencies
.github/workflows/scorecard.yml
actions
.github/workflows/sync-module-tags.yaml
actions
- actions/checkout 8ade135a41bc03ea155e62e844d188df1ea18608 composite
pkg/signature/kms/aws/go.mod
go
- github.com/aws/aws-sdk-go v1.45.15
- github.com/aws/aws-sdk-go-v2 v1.21.0
- github.com/aws/aws-sdk-go-v2/config v1.18.41
- github.com/aws/aws-sdk-go-v2/credentials v1.13.39
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.11
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.41
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.35
- github.com/aws/aws-sdk-go-v2/internal/ini v1.3.42
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.35
- github.com/aws/aws-sdk-go-v2/service/kms v1.24.5
- github.com/aws/aws-sdk-go-v2/service/sso v1.14.0
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.0
- github.com/aws/aws-sdk-go-v2/service/sts v1.22.0
- github.com/aws/smithy-go v1.14.2
- github.com/davecgh/go-spew v1.1.1
- github.com/golang/protobuf v1.5.3
- github.com/google/go-containerregistry v0.16.1
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/jmespath/go-jmespath v0.4.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/opencontainers/go-digest v1.0.0
- github.com/pmezard/go-difflib v1.0.0
- github.com/sigstore/sigstore v1.6.4
- github.com/stretchr/testify v1.8.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- golang.org/x/crypto v0.12.0
- golang.org/x/net v0.14.0
- golang.org/x/sync v0.2.0
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.12.0
- google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
- google.golang.org/grpc v1.55.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v3 v3.0.1
pkg/signature/kms/aws/go.sum
go
- github.com/aws/aws-sdk-go v1.45.15
- github.com/aws/aws-sdk-go-v2 v1.21.0
- github.com/aws/aws-sdk-go-v2/config v1.18.41
- github.com/aws/aws-sdk-go-v2/credentials v1.13.39
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.11
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.41
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.35
- github.com/aws/aws-sdk-go-v2/internal/ini v1.3.42
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.35
- github.com/aws/aws-sdk-go-v2/service/kms v1.24.5
- github.com/aws/aws-sdk-go-v2/service/sso v1.14.0
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.0
- github.com/aws/aws-sdk-go-v2/service/sts v1.22.0
- github.com/aws/smithy-go v1.14.2
- github.com/beorn7/perks v1.0.1
- github.com/cespare/xxhash/v2 v2.2.0
- github.com/davecgh/go-spew v1.1.0
- github.com/davecgh/go-spew v1.1.1
- github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
- github.com/facebookgo/limitgroup v0.0.0-20150612190941-6abd8d71ec01
- github.com/facebookgo/muster v0.0.0-20150708232844-fd3d7953fd52
- github.com/go-test/deep v1.1.0
- github.com/golang/protobuf v1.5.0
- github.com/golang/protobuf v1.5.3
- github.com/google/go-cmp v0.5.5
- github.com/google/go-cmp v0.5.8
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.16.1
- github.com/honeycombio/beeline-go v1.10.0
- github.com/honeycombio/libhoney-go v1.16.0
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/jmespath/go-jmespath v0.4.0
- github.com/jmespath/go-jmespath/internal/testify v1.5.1
- github.com/jmhodges/clock v0.0.0-20160418191101-880ee4c33548
- github.com/klauspost/compress v1.16.5
- github.com/kr/pretty v0.2.1
- github.com/kr/text v0.2.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/matttproud/golang_protobuf_extensions v1.0.1
- github.com/opencontainers/go-digest v1.0.0
- github.com/pkg/errors v0.9.1
- github.com/pmezard/go-difflib v1.0.0
- github.com/prometheus/client_golang v1.13.0
- github.com/prometheus/client_model v0.3.0
- github.com/prometheus/common v0.37.0
- github.com/prometheus/procfs v0.8.0
- github.com/stretchr/objx v0.1.0
- github.com/stretchr/testify v1.8.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- github.com/vmihailenco/msgpack/v5 v5.3.5
- github.com/vmihailenco/tagparser/v2 v2.0.0
- github.com/yuin/goldmark v1.4.13
- go.uber.org/goleak v1.2.1
- golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
- golang.org/x/crypto v0.0.0-20210921155107-089bfa567519
- golang.org/x/crypto v0.12.0
- golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4
- golang.org/x/net v0.0.0-20190620200207-3b0461eec859
- golang.org/x/net v0.0.0-20210226172049-e18ecbb05110
- golang.org/x/net v0.0.0-20220722155237-a158d28d115b
- golang.org/x/net v0.1.0
- golang.org/x/net v0.14.0
- golang.org/x/sync v0.0.0-20190423024810-112230192c58
- golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4
- golang.org/x/sync v0.2.0
- golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
- golang.org/x/sys v0.0.0-20201119102817-f84b799fce68
- golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1
- golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a
- golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f
- golang.org/x/sys v0.1.0
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1
- golang.org/x/term v0.0.0-20210927222741-03fcf44c2211
- golang.org/x/term v0.1.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.3.0
- golang.org/x/text v0.3.3
- golang.org/x/text v0.3.7
- golang.org/x/text v0.4.0
- golang.org/x/text v0.12.0
- golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e
- golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e
- golang.org/x/tools v0.1.12
- golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7
- golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543
- google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
- google.golang.org/grpc v1.55.0
- google.golang.org/protobuf v1.26.0-rc.1
- google.golang.org/protobuf v1.26.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/alexcesaro/statsd.v2 v2.0.0
- gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v2 v2.2.8
- gopkg.in/yaml.v3 v3.0.1
pkg/signature/kms/azure/go.mod
go
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.7.2
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.1
- github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.0.0
- github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1
- github.com/go-jose/go-jose/v3 v3.0.0
- github.com/golang-jwt/jwt/v5 v5.0.0
- github.com/golang/protobuf v1.5.3
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.16.1
- github.com/google/uuid v1.3.0
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/kylelemons/godebug v1.1.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/opencontainers/go-digest v1.0.0
- github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8
- github.com/sigstore/sigstore v1.6.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- golang.org/x/crypto v0.13.0
- golang.org/x/net v0.14.0
- golang.org/x/sync v0.2.0
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.13.0
- google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
- google.golang.org/grpc v1.55.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v3 v3.0.1
pkg/signature/kms/azure/go.sum
go
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.7.2
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.1
- github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.0.0
- github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1
- github.com/beorn7/perks v1.0.1
- github.com/cespare/xxhash/v2 v2.2.0
- github.com/davecgh/go-spew v1.1.0
- github.com/davecgh/go-spew v1.1.1
- github.com/dnaeon/go-vcr v1.2.0
- github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
- github.com/facebookgo/limitgroup v0.0.0-20150612190941-6abd8d71ec01
- github.com/facebookgo/muster v0.0.0-20150708232844-fd3d7953fd52
- github.com/go-jose/go-jose/v3 v3.0.0
- github.com/go-test/deep v1.1.0
- github.com/golang-jwt/jwt/v5 v5.0.0
- github.com/golang/protobuf v1.5.0
- github.com/golang/protobuf v1.5.3
- github.com/google/go-cmp v0.5.0
- github.com/google/go-cmp v0.5.5
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.16.1
- github.com/google/uuid v1.3.0
- github.com/honeycombio/beeline-go v1.10.0
- github.com/honeycombio/libhoney-go v1.16.0
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/jmhodges/clock v0.0.0-20160418191101-880ee4c33548
- github.com/klauspost/compress v1.16.5
- github.com/kr/pretty v0.2.1
- github.com/kr/text v0.2.0
- github.com/kylelemons/godebug v1.1.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/matttproud/golang_protobuf_extensions v1.0.1
- github.com/opencontainers/go-digest v1.0.0
- github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8
- github.com/pmezard/go-difflib v1.0.0
- github.com/prometheus/client_golang v1.13.0
- github.com/prometheus/client_model v0.3.0
- github.com/prometheus/common v0.37.0
- github.com/prometheus/procfs v0.8.0
- github.com/stretchr/objx v0.1.0
- github.com/stretchr/testify v1.6.1
- github.com/stretchr/testify v1.8.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- github.com/vmihailenco/msgpack/v5 v5.3.5
- github.com/vmihailenco/tagparser/v2 v2.0.0
- go.uber.org/goleak v1.2.1
- golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
- golang.org/x/crypto v0.0.0-20190911031432-227b76d455e7
- golang.org/x/crypto v0.13.0
- golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3
- golang.org/x/net v0.14.0
- golang.org/x/sync v0.2.0
- golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
- golang.org/x/sys v0.0.0-20190412213103-97732733099d
- golang.org/x/sys v0.0.0-20210616045830-e2b7044e8c71
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.3.0
- golang.org/x/text v0.13.0
- golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543
- google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
- google.golang.org/grpc v1.55.0
- google.golang.org/protobuf v1.26.0-rc.1
- google.golang.org/protobuf v1.26.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/alexcesaro/statsd.v2 v2.0.0
- gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
- gopkg.in/yaml.v3 v3.0.1
pkg/signature/kms/gcp/go.mod
go
- cloud.google.com/go/compute v1.23.0
- cloud.google.com/go/compute/metadata v0.2.3
- cloud.google.com/go/iam v1.1.1
- cloud.google.com/go/kms v1.15.2
- github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
- github.com/golang/protobuf v1.5.3
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.16.1
- github.com/google/s2a-go v0.1.7
- github.com/googleapis/enterprise-certificate-proxy v0.2.5
- github.com/googleapis/gax-go/v2 v2.12.0
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/opencontainers/go-digest v1.0.0
- github.com/sigstore/sigstore v1.6.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- go.opencensus.io v0.24.0
- golang.org/x/crypto v0.13.0
- golang.org/x/net v0.15.0
- golang.org/x/oauth2 v0.12.0
- golang.org/x/sync v0.3.0
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.13.0
- google.golang.org/api v0.142.0
- google.golang.org/appengine v1.6.7
- google.golang.org/genproto v0.0.0-20230803162519-f966b187b2e5
- google.golang.org/genproto/googleapis/api v0.0.0-20230803162519-f966b187b2e5
- google.golang.org/genproto/googleapis/rpc v0.0.0-20230913181813-007df8e322eb
- google.golang.org/grpc v1.57.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v3 v3.0.1
pkg/signature/kms/gcp/go.sum
go
- 153 dependencies
pkg/signature/kms/hashivault/go.mod
go
- github.com/cenkalti/backoff/v3 v3.2.2
- github.com/davecgh/go-spew v1.1.1
- github.com/go-jose/go-jose/v3 v3.0.0
- github.com/golang/protobuf v1.5.3
- github.com/google/go-containerregistry v0.16.1
- github.com/hashicorp/errwrap v1.1.0
- github.com/hashicorp/go-cleanhttp v0.5.2
- github.com/hashicorp/go-multierror v1.1.1
- github.com/hashicorp/go-retryablehttp v0.7.1
- github.com/hashicorp/go-rootcerts v1.0.2
- github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7
- github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
- github.com/hashicorp/go-sockaddr v1.0.2
- github.com/hashicorp/hcl v1.0.0
- github.com/hashicorp/vault/api v1.10.0
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/mitchellh/go-homedir v1.1.0
- github.com/mitchellh/mapstructure v1.5.0
- github.com/opencontainers/go-digest v1.0.0
- github.com/pmezard/go-difflib v1.0.0
- github.com/ryanuber/go-glob v1.0.0
- github.com/sigstore/sigstore v1.6.4
- github.com/stretchr/testify v1.8.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- golang.org/x/crypto v0.12.0
- golang.org/x/net v0.14.0
- golang.org/x/sync v0.2.0
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.12.0
- golang.org/x/time v0.2.0
- google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
- google.golang.org/grpc v1.55.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v3 v3.0.1
pkg/signature/kms/hashivault/go.sum
go
- github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310
- github.com/beorn7/perks v1.0.1
- github.com/bgentry/speakeasy v0.1.0
- github.com/cenkalti/backoff/v3 v3.2.2
- github.com/cespare/xxhash/v2 v2.2.0
- github.com/davecgh/go-spew v1.1.0
- github.com/davecgh/go-spew v1.1.1
- github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
- github.com/facebookgo/limitgroup v0.0.0-20150612190941-6abd8d71ec01
- github.com/facebookgo/muster v0.0.0-20150708232844-fd3d7953fd52
- github.com/fatih/color v1.7.0
- github.com/go-jose/go-jose/v3 v3.0.0
- github.com/go-test/deep v1.1.0
- github.com/golang/protobuf v1.5.0
- github.com/golang/protobuf v1.5.3
- github.com/google/go-cmp v0.5.0
- github.com/google/go-cmp v0.5.5
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.16.1
- github.com/hashicorp/errwrap v1.0.0
- github.com/hashicorp/errwrap v1.1.0
- github.com/hashicorp/go-cleanhttp v0.5.1
- github.com/hashicorp/go-cleanhttp v0.5.2
- github.com/hashicorp/go-hclog v0.9.2
- github.com/hashicorp/go-hclog v0.16.2
- github.com/hashicorp/go-multierror v1.0.0
- github.com/hashicorp/go-multierror v1.1.1
- github.com/hashicorp/go-retryablehttp v0.7.1
- github.com/hashicorp/go-rootcerts v1.0.2
- github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7
- github.com/hashicorp/go-secure-stdlib/strutil v0.1.1
- github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
- github.com/hashicorp/go-sockaddr v1.0.2
- github.com/hashicorp/hcl v1.0.0
- github.com/hashicorp/vault/api v1.10.0
- github.com/honeycombio/beeline-go v1.10.0
- github.com/honeycombio/libhoney-go v1.16.0
- github.com/jellydator/ttlcache/v3 v3.1.0
- github.com/jmhodges/clock v0.0.0-20160418191101-880ee4c33548
- github.com/klauspost/compress v1.16.5
- github.com/kr/pretty v0.2.1
- github.com/kr/text v0.2.0
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
- github.com/mattn/go-colorable v0.0.9
- github.com/mattn/go-colorable v0.1.6
- github.com/mattn/go-isatty v0.0.3
- github.com/mattn/go-isatty v0.0.12
- github.com/matttproud/golang_protobuf_extensions v1.0.1
- github.com/mitchellh/cli v1.0.0
- github.com/mitchellh/go-homedir v1.1.0
- github.com/mitchellh/go-wordwrap v1.0.0
- github.com/mitchellh/mapstructure v1.4.1
- github.com/mitchellh/mapstructure v1.5.0
- github.com/opencontainers/go-digest v1.0.0
- github.com/pmezard/go-difflib v1.0.0
- github.com/posener/complete v1.1.1
- github.com/prometheus/client_golang v1.13.0
- github.com/prometheus/client_model v0.3.0
- github.com/prometheus/common v0.37.0
- github.com/prometheus/procfs v0.8.0
- github.com/ryanuber/columnize v2.1.0+incompatible
- github.com/ryanuber/go-glob v1.0.0
- github.com/stretchr/objx v0.1.0
- github.com/stretchr/testify v1.2.2
- github.com/stretchr/testify v1.6.1
- github.com/stretchr/testify v1.7.0
- github.com/stretchr/testify v1.8.4
- github.com/theupdateframework/go-tuf v0.5.2
- github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
- github.com/vmihailenco/msgpack/v5 v5.3.5
- github.com/vmihailenco/tagparser/v2 v2.0.0
- go.uber.org/goleak v1.2.1
- golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
- golang.org/x/crypto v0.0.0-20190911031432-227b76d455e7
- golang.org/x/crypto v0.12.0
- golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3
- golang.org/x/net v0.14.0
- golang.org/x/sync v0.2.0
- golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc
- golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
- golang.org/x/sys v0.0.0-20190412213103-97732733099d
- golang.org/x/sys v0.12.0
- golang.org/x/term v0.12.0
- golang.org/x/text v0.3.0
- golang.org/x/text v0.12.0
- golang.org/x/time v0.2.0
- golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543
- google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
- google.golang.org/grpc v1.55.0
- google.golang.org/protobuf v1.26.0-rc.1
- google.golang.org/protobuf v1.26.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/alexcesaro/statsd.v2 v2.0.0
- gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/square/go-jose.v2 v2.6.0
- gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
- gopkg.in/yaml.v3 v3.0.1
test/cliplugin/localkms/go.mod
go
- github.com/davecgh/go-spew v1.1.1
- github.com/google/go-containerregistry v0.21.7
- github.com/opencontainers/go-digest v1.0.0
- github.com/secure-systems-lab/go-securesystemslib v0.11.0
- github.com/sigstore/protobuf-specs v0.5.1
- github.com/sigstore/sigstore v0.0.0-00010101000000-000000000000
- github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78
- golang.org/x/crypto v0.52.0
- golang.org/x/sys v0.46.0
- golang.org/x/term v0.43.0
- google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217
- google.golang.org/protobuf v1.36.11
test/cliplugin/localkms/go.sum
go
- github.com/davecgh/go-spew v1.1.1
- github.com/google/go-cmp v0.7.0
- github.com/google/go-containerregistry v0.21.7
- github.com/opencontainers/go-digest v1.0.0
- github.com/pmezard/go-difflib v1.0.0
- github.com/secure-systems-lab/go-securesystemslib v0.11.0
- github.com/sigstore/protobuf-specs v0.5.1
- github.com/stretchr/testify v1.11.1
- github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78
- golang.org/x/crypto v0.52.0
- golang.org/x/sys v0.46.0
- golang.org/x/term v0.43.0
- google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217
- google.golang.org/protobuf v1.36.11
- gopkg.in/yaml.v3 v3.0.1