Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
138 changes: 69 additions & 69 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -4,23 +4,23 @@ go 1.26.5

require (
cloud.google.com/go/secretmanager v1.21.0
code.cloudfoundry.org/bytefmt v0.82.0
code.cloudfoundry.org/bytefmt v0.83.0
entgo.io/ent v0.14.6
github.com/adrg/xdg v0.5.3
github.com/aws/aws-sdk-go-v2 v1.43.0
github.com/aws/aws-sdk-go-v2/config v1.32.31
github.com/aws/aws-sdk-go-v2/credentials v1.19.30
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.44.0
github.com/aws/aws-sdk-go-v2/service/sso v1.33.0
github.com/aws/smithy-go v1.27.4
github.com/aws/aws-sdk-go-v2 v1.43.3
github.com/aws/aws-sdk-go-v2/config v1.32.34
github.com/aws/aws-sdk-go-v2/credentials v1.19.33
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.44.3
github.com/aws/aws-sdk-go-v2/service/sso v1.33.3
github.com/aws/smithy-go v1.27.6
github.com/cenkalti/backoff/v4 v4.3.0
github.com/coreos/go-oidc/v3 v3.20.0
github.com/docker/distribution v2.8.3+incompatible
github.com/docker/go-connections v0.7.0 // indirect
github.com/getsentry/sentry-go v0.48.0
github.com/go-kratos/kratos/contrib/log/zap/v2 v2.0.0-20230823024326-a09f4d8ebba9
github.com/go-kratos/kratos/v2 v2.9.2
github.com/google/go-containerregistry v0.21.7
github.com/google/go-containerregistry v0.21.8
github.com/google/subcommands v1.2.0
github.com/google/uuid v1.6.0
github.com/google/wire v0.7.0
Expand All @@ -37,7 +37,7 @@ require (
github.com/prometheus/client_golang v1.24.1
github.com/rs/zerolog v1.35.1
github.com/secure-systems-lab/go-securesystemslib v0.11.0
github.com/sigstore/sigstore v1.10.8
github.com/sigstore/sigstore v1.10.9
github.com/spdx/tools-golang v0.5.7
github.com/spf13/cobra v1.10.2
github.com/spf13/pflag v1.0.10
Expand All @@ -49,9 +49,9 @@ require (
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f
golang.org/x/oauth2 v0.36.0
golang.org/x/term v0.45.0
google.golang.org/api v0.290.0
google.golang.org/api v0.291.0
google.golang.org/genproto v0.0.0-20260519071638-aa98bba5eb94 // indirect
google.golang.org/grpc v1.82.1
google.golang.org/grpc v1.83.0
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
sigs.k8s.io/yaml v1.6.0
)
Expand All @@ -64,8 +64,8 @@ require (
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.0
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.8.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.35
github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.38
github.com/aws/aws-sdk-go-v2/service/s3 v1.106.3
github.com/casbin/casbin/v2 v2.135.0
github.com/denisbrodbeck/machineid v1.0.1
github.com/extism/go-sdk v1.7.1
Expand All @@ -79,29 +79,29 @@ require (
github.com/invopop/jsonschema v0.14.0
github.com/jackc/pgx/v5 v5.10.0
github.com/muesli/reflow v0.3.0
github.com/nats-io/nats-server/v2 v2.14.3
github.com/nats-io/nats-server/v2 v2.14.4
github.com/nats-io/nats.go v1.52.0
github.com/open-policy-agent/opa v1.18.2
github.com/open-policy-agent/opa v1.19.0
github.com/openvex/go-vex v0.2.8
github.com/owenrumney/go-sarif/v3 v3.3.0
github.com/owenrumney/go-sarif/v3 v3.3.1
github.com/posthog/posthog-go v1.22.0
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
github.com/sigstore/cosign/v3 v3.1.2
github.com/sigstore/fulcio v1.8.8
github.com/sigstore/protobuf-specs v0.5.1
github.com/sigstore/sigstore-go v1.2.2
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.10.8
github.com/sigstore/sigstore/pkg/signature/kms/azure v1.10.8
github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.10.8
github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.10.8
github.com/sigstore/sigstore-go v1.3.0
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/azure v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.10.9
github.com/sigstore/timestamp-authority/v2 v2.1.3
github.com/styrainc/regal v0.35.1
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78
github.com/zricethezav/gitleaks/v8 v8.30.1
gitlab.com/gitlab-org/security-products/analyzers/report/v5 v5.13.1
go.step.sm/crypto v0.85.0
google.golang.org/genproto/googleapis/api v0.0.0-20260630182238-925bb5da69e7
google.golang.org/genproto/googleapis/bytestream v0.0.0-20260706201446-f0a921348800
go.step.sm/crypto v0.87.0
google.golang.org/genproto/googleapis/api v0.0.0-20260727163830-6c54dddc4772
google.golang.org/genproto/googleapis/bytestream v0.0.0-20260724162435-b2f20204f0df
)

require github.com/vektah/gqlparser/v2 v2.5.36
Expand All @@ -116,10 +116,10 @@ require (
)

require (
cel.dev/expr v0.25.1 // indirect
cloud.google.com/go/auth v0.20.0 // indirect
cel.dev/expr v0.25.2 // indirect
cloud.google.com/go/auth v0.22.0 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/kms v1.31.0 // indirect
cloud.google.com/go/kms v1.33.0 // indirect
cloud.google.com/go/longrunning v1.2.0 // indirect
cloud.google.com/go/monitoring v1.29.0 // indirect
cloud.google.com/go/pubsub/v2 v2.6.1 // indirect
Expand All @@ -131,7 +131,7 @@ require (
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 // indirect
github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2 // indirect
github.com/BobuSumisu/aho-corasick v1.0.3 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.32.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.33.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.57.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.57.0 // indirect
github.com/Masterminds/goutils v1.1.1 // indirect
Expand All @@ -141,16 +141,16 @@ require (
github.com/agnivade/levenshtein v1.2.1 // indirect
github.com/anchore/go-struct-converter v0.1.0 // indirect
github.com/andybalholm/brotli v1.2.0 // indirect
github.com/antithesishq/antithesis-sdk-go v0.7.0-default-no-op // indirect
github.com/antithesishq/antithesis-sdk-go v0.7.2-default-no-op // indirect
github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 // indirect
github.com/aws/aws-sdk-go-v2/service/kms v1.54.1 // indirect
github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 // indirect
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.16 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.35 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.15 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.27 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.35 // indirect
github.com/aws/aws-sdk-go-v2/service/kms v1.55.0 // indirect
github.com/aws/aws-sdk-go-v2/service/signin v1.5.3 // indirect
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
github.com/bahlo/generic-list-go v0.2.0 // indirect
github.com/bmatcuk/doublestar v1.3.4 // indirect
Expand Down Expand Up @@ -195,16 +195,17 @@ require (
github.com/go-ole/go-ole v1.3.0 // indirect
github.com/go-openapi/runtime/server-middleware v0.30.0 // indirect
github.com/go-openapi/swag/cmdutils v0.27.0 // indirect
github.com/go-openapi/swag/conv v0.27.0 // indirect
github.com/go-openapi/swag/fileutils v0.26.1 // indirect
github.com/go-openapi/swag/conv v0.27.3 // indirect
github.com/go-openapi/swag/fileutils v0.27.3 // indirect
github.com/go-openapi/swag/jsonname v0.26.1 // indirect
github.com/go-openapi/swag/jsonutils v0.27.0 // indirect
github.com/go-openapi/swag/loading v0.26.1 // indirect
github.com/go-openapi/swag/mangling v0.26.1 // indirect
github.com/go-openapi/swag/jsonutils v0.27.3 // indirect
github.com/go-openapi/swag/loading v0.27.3 // indirect
github.com/go-openapi/swag/mangling v0.27.3 // indirect
github.com/go-openapi/swag/netutils v0.27.0 // indirect
github.com/go-openapi/swag/stringutils v0.26.1 // indirect
github.com/go-openapi/swag/typeutils v0.27.0 // indirect
github.com/go-openapi/swag/yamlutils v0.26.1 // indirect
github.com/go-openapi/swag/pools v0.27.3 // indirect
github.com/go-openapi/swag/stringutils v0.27.3 // indirect
github.com/go-openapi/swag/typeutils v0.27.3 // indirect
github.com/go-openapi/swag/yamlutils v0.27.3 // indirect
github.com/go-playground/assert/v2 v2.2.0 // indirect
github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
github.com/gobwas/glob v0.2.3 // indirect
Expand All @@ -222,7 +223,7 @@ require (
github.com/ianlancetaylor/demangle v0.0.0-20240805132620-81f5be970eca // indirect
github.com/jackc/puddle/v2 v2.2.2 // indirect
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
github.com/jellydator/ttlcache/v3 v3.4.0 // indirect
github.com/jellydator/ttlcache/v3 v3.4.1 // indirect
github.com/kevinburke/ssh_config v1.6.0 // indirect
github.com/klauspost/cpuid/v2 v2.3.0 // indirect
github.com/klauspost/crc32 v1.3.0 // indirect
Expand All @@ -235,10 +236,10 @@ require (
github.com/lestrrat-go/httprc/v3 v3.0.5 // indirect
github.com/lestrrat-go/jwx/v3 v3.1.1 // indirect
github.com/lestrrat-go/option/v2 v2.0.0 // indirect
github.com/letsencrypt/boulder v0.20260309.0 // indirect
github.com/lucasb-eyer/go-colorful v1.4.0 // indirect
github.com/lufia/plan9stats v0.0.0-20240909124753-873cd0166683 // indirect
github.com/mholt/archives v0.1.5 // indirect
github.com/miekg/dns v1.1.62 // indirect
github.com/mikelolasagasti/xz v1.0.1 // indirect
github.com/minio/crc64nvme v1.1.1 // indirect
github.com/minio/highwayhash v1.0.4 // indirect
Expand All @@ -248,7 +249,7 @@ require (
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/moby/docker-image-spec v1.3.1 // indirect
github.com/moby/go-archive v0.2.0 // indirect
github.com/moby/moby/client v0.4.1 // indirect
github.com/moby/moby/client v0.5.1 // indirect
github.com/moby/sys/user v0.4.0 // indirect
github.com/moby/sys/userns v0.1.0 // indirect
github.com/muesli/termenv v0.15.1 // indirect
Expand Down Expand Up @@ -288,10 +289,9 @@ require (
github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
github.com/tchap/go-patricia/v2 v2.3.3 // indirect
github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834 // indirect
github.com/tetratelabs/wazero v1.11.0 // indirect
github.com/tetratelabs/wazero v1.12.0 // indirect
github.com/theupdateframework/go-tuf/v2 v2.4.2 // indirect
github.com/tinylib/msgp v1.6.1 // indirect
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
github.com/tklauser/go-sysconf v0.3.16 // indirect
github.com/tklauser/numcpus v0.11.0 // indirect
github.com/transparency-dev/formats v0.1.1 // indirect
Expand All @@ -312,14 +312,14 @@ require (
gitlab.com/gitlab-org/security-products/analyzers/common/v3 v3.4.0 // indirect
gitlab.com/gitlab-org/security-products/analyzers/ruleset/v3 v3.3.2 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/contrib/detectors/gcp v1.43.0 // indirect
go.opentelemetry.io/contrib/detectors/gcp v1.44.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 // indirect
go.opentelemetry.io/otel/metric v1.44.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.44.0 // indirect
go.opentelemetry.io/proto/otlp v1.10.0 // indirect
go.yaml.in/yaml/v2 v2.4.4 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
go.yaml.in/yaml/v3 v3.0.5 // indirect
go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect
go4.org v0.0.0-20230225012048-214862532bf5 // indirect
goa.design/goa/v3 v3.27.0 // indirect
Expand All @@ -342,12 +342,12 @@ require (
github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
github.com/agext/levenshtein v1.2.3 // indirect
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.45.0
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.34 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.34 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.34 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.34 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.3 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.45.3
github.com/beorn7/perks v1.0.1 // indirect
github.com/blang/semver v3.5.1+incompatible // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
Expand All @@ -357,7 +357,7 @@ require (
github.com/desertbit/timer v0.0.0-20180107155436-c41aec40b27f // indirect
github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 // indirect
github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
github.com/docker/cli v29.5.3+incompatible // indirect
github.com/docker/cli v29.6.2+incompatible // indirect
github.com/docker/docker-credential-helpers v0.9.5 // indirect
github.com/docker/go-units v0.5.0 // indirect
github.com/emicklei/go-restful/v3 v3.13.0 // indirect
Expand All @@ -367,26 +367,26 @@ require (
github.com/go-kratos/aegis v0.2.0 // indirect
github.com/go-logr/logr v1.4.4 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/go-openapi/analysis v0.25.2 // indirect
github.com/go-openapi/analysis v0.25.5 // indirect
github.com/go-openapi/errors v0.22.8 // indirect
github.com/go-openapi/inflect v0.21.0 // indirect
github.com/go-openapi/jsonpointer v0.23.1 // indirect
github.com/go-openapi/jsonreference v0.21.6 // indirect
github.com/go-openapi/loads v0.24.0 // indirect
github.com/go-openapi/runtime v0.32.4 // indirect
github.com/go-openapi/spec v0.22.6 // indirect
github.com/go-openapi/strfmt v0.26.4 // indirect
github.com/go-openapi/jsonpointer v1.0.0 // indirect
github.com/go-openapi/jsonreference v1.0.0 // indirect
github.com/go-openapi/loads v0.25.0 // indirect
github.com/go-openapi/runtime v0.33.0 // indirect
github.com/go-openapi/spec v0.22.9 // indirect
github.com/go-openapi/strfmt v0.27.0 // indirect
github.com/go-openapi/swag v0.26.1 // indirect
github.com/go-openapi/validate v0.26.0 // indirect
github.com/go-openapi/validate v0.26.1 // indirect
github.com/go-playground/form/v4 v4.2.1 // indirect
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
github.com/golang/protobuf v1.5.4 // indirect
github.com/golang/snappy v0.0.4 // indirect
github.com/golang/snappy v1.0.0 // indirect
github.com/google/certificate-transparency-go v1.3.3 // indirect
github.com/google/go-cmp v0.7.0
github.com/google/go-querystring v1.2.0 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.18 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.19 // indirect
github.com/gorilla/mux v1.8.1
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
Expand Down Expand Up @@ -453,7 +453,7 @@ require (
golang.org/x/text v0.40.0
golang.org/x/time v0.15.0 // indirect
golang.org/x/tools v0.48.0 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260724162435-b2f20204f0df // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
gopkg.in/yaml.v2 v2.4.0
gopkg.in/yaml.v3 v3.0.1
Expand Down
Loading
Loading