Fix import paths, update go.mod to be policy-controller.

Signed-off-by: Ville Aikas <vaikas@chainguard.dev>
mattmoor · Jun 8, 2022 · 7a1fcca · 7a1fcca
1 parent 3789ec6
commit 7a1fcca
Show file tree

Hide file tree

Showing 222 changed files with 562 additions and 763 deletions.
diff --git a/cmd/cosign/cli/attach.go b/cmd/cosign/cli/attach.go
@@ -19,8 +19,8 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/attach"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/attach"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 	"github.com/spf13/cobra"
 )
 

diff --git a/cmd/cosign/cli/attach/attestation.go b/cmd/cosign/cli/attach/attestation.go
@@ -22,11 +22,11 @@ import (
 
 	"github.com/google/go-containerregistry/pkg/name"
 	ssldsse "github.com/secure-systems-lab/go-securesystemslib/dsse"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/oci/mutate"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
-	"github.com/sigstore/cosign/pkg/oci/static"
-	"github.com/sigstore/cosign/pkg/types"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/oci/mutate"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/pkg/oci/static"
+	"github.com/sigstore/policy-controller/pkg/types"
 )
 
 func AttestationCmd(ctx context.Context, regOpts options.RegistryOptions, signedPayload, imageRef string) error {

diff --git a/cmd/cosign/cli/attach/sbom.go b/cmd/cosign/cli/attach/sbom.go
@@ -26,9 +26,9 @@ import (
 	"github.com/google/go-containerregistry/pkg/name"
 	"github.com/google/go-containerregistry/pkg/v1/remote"
 	"github.com/google/go-containerregistry/pkg/v1/types"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
-	"github.com/sigstore/cosign/pkg/oci/static"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/pkg/oci/static"
 )
 
 func SBOMCmd(ctx context.Context, regOpts options.RegistryOptions, sbomRef string, sbomType types.MediaType, imageRef string) error {

diff --git a/cmd/cosign/cli/attach/sig.go b/cmd/cosign/cli/attach/sig.go
@@ -24,10 +24,10 @@ import (
 
 	"github.com/google/go-containerregistry/pkg/name"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/oci/mutate"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
-	"github.com/sigstore/cosign/pkg/oci/static"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/oci/mutate"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/pkg/oci/static"
 	sigPayload "github.com/sigstore/sigstore/pkg/signature/payload"
 )
 

diff --git a/cmd/cosign/cli/attest.go b/cmd/cosign/cli/attest.go
@@ -20,9 +20,9 @@ import (
 
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/attest"
-	"github.com/sigstore/cosign/cmd/cosign/cli/generate"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/attest"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/generate"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func Attest() *cobra.Command {

diff --git a/cmd/cosign/cli/attest/attest.go b/cmd/cosign/cli/attest/attest.go
@@ -27,18 +27,18 @@ import (
 	"github.com/google/go-containerregistry/pkg/name"
 	v1 "github.com/google/go-containerregistry/pkg/v1"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/cmd/cosign/cli/rekor"
-	"github.com/sigstore/cosign/cmd/cosign/cli/sign"
-	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/attestation"
-	cbundle "github.com/sigstore/cosign/pkg/cosign/bundle"
-	cremote "github.com/sigstore/cosign/pkg/cosign/remote"
-	"github.com/sigstore/cosign/pkg/oci/mutate"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
-	"github.com/sigstore/cosign/pkg/oci/static"
-	sigs "github.com/sigstore/cosign/pkg/signature"
-	"github.com/sigstore/cosign/pkg/types"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/rekor"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/sign"
+	"github.com/sigstore/policy-controller/pkg/cosign"
+	"github.com/sigstore/policy-controller/pkg/cosign/attestation"
+	cbundle "github.com/sigstore/policy-controller/pkg/cosign/bundle"
+	cremote "github.com/sigstore/policy-controller/pkg/cosign/remote"
+	"github.com/sigstore/policy-controller/pkg/oci/mutate"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/pkg/oci/static"
+	sigs "github.com/sigstore/policy-controller/pkg/signature"
+	"github.com/sigstore/policy-controller/pkg/types"
 	"github.com/sigstore/rekor/pkg/generated/client"
 	"github.com/sigstore/rekor/pkg/generated/models"
 	"github.com/sigstore/sigstore/pkg/signature/dsse"

diff --git a/cmd/cosign/cli/clean.go b/cmd/cosign/cli/clean.go
@@ -27,9 +27,9 @@ import (
 	"github.com/google/go-containerregistry/pkg/v1/remote/transport"
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/cosign"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/cosign"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
 )
 
 func Clean() *cobra.Command {

diff --git a/cmd/cosign/cli/commands.go b/cmd/cosign/cli/commands.go
@@ -25,8 +25,8 @@ import (
 	"sigs.k8s.io/release-utils/version"
 
 	cranecmd "github.com/google/go-containerregistry/cmd/crane/cmd"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/cosign"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/cosign"
 )
 
 var (

diff --git a/cmd/cosign/cli/copy.go b/cmd/cosign/cli/copy.go
@@ -18,8 +18,8 @@ package cli
 import (
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/copy"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/copy"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func Copy() *cobra.Command {

diff --git a/cmd/cosign/cli/copy/copy.go b/cmd/cosign/cli/copy/copy.go
@@ -25,10 +25,10 @@ import (
 	v1 "github.com/google/go-containerregistry/pkg/v1"
 	"github.com/google/go-containerregistry/pkg/v1/remote"
 	"github.com/google/go-containerregistry/pkg/v1/remote/transport"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/oci"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
-	"github.com/sigstore/cosign/pkg/oci/walk"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/oci"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/pkg/oci/walk"
 )
 
 // CopyCmd implements the logic to copy the supplied container image and signatures.

diff --git a/cmd/cosign/cli/dockerfile.go b/cmd/cosign/cli/dockerfile.go
@@ -16,11 +16,11 @@
 package cli
 
 import (
-	"github.com/sigstore/cosign/cmd/cosign/cli/dockerfile"
-	"github.com/sigstore/cosign/cmd/cosign/cli/verify"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/dockerfile"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/verify"
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func Dockerfile() *cobra.Command {

diff --git a/cmd/cosign/cli/dockerfile/verify.go b/cmd/cosign/cli/dockerfile/verify.go
@@ -24,7 +24,7 @@ import (
 	"os"
 	"strings"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/verify"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/verify"
 )
 
 // VerifyCommand verifies a signature on a supplied container image

diff --git a/cmd/cosign/cli/download.go b/cmd/cosign/cli/download.go
@@ -21,8 +21,8 @@ import (
 
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/download"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/download"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func Download() *cobra.Command {

diff --git a/cmd/cosign/cli/download/attestation.go b/cmd/cosign/cli/download/attestation.go
@@ -21,8 +21,8 @@ import (
 	"fmt"
 
 	"github.com/google/go-containerregistry/pkg/name"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/cosign"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/cosign"
 )
 
 func AttestationCmd(ctx context.Context, regOpts options.RegistryOptions, imageRef string) error {

diff --git a/cmd/cosign/cli/download/sbom.go b/cmd/cosign/cli/download/sbom.go
@@ -22,8 +22,8 @@ import (
 	"os"
 
 	"github.com/google/go-containerregistry/pkg/name"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
 )
 
 func SBOMCmd(ctx context.Context, regOpts options.RegistryOptions, imageRef string, out io.Writer) ([]string, error) {

diff --git a/cmd/cosign/cli/download/signature.go b/cmd/cosign/cli/download/signature.go
@@ -21,8 +21,8 @@ import (
 	"fmt"
 
 	"github.com/google/go-containerregistry/pkg/name"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/cosign"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/cosign"
 )
 
 func SignatureCmd(ctx context.Context, regOpts options.RegistryOptions, imageRef string) error {

diff --git a/cmd/cosign/cli/fulcio/depcheck_test.go b/cmd/cosign/cli/fulcio/depcheck_test.go
@@ -23,7 +23,7 @@ import (
 
 func TestNoDeps(t *testing.T) {
 	depcheck.AssertNoDependency(t, map[string][]string{
-		"github.com/sigstore/cosign/cmd/cosign/cli/fulcio": {
+		"github.com/sigstore/policy-controller/cmd/cosign/cli/fulcio": {
 			// Avoid pulling in a variety of things that are massive dependencies.
 			"github.com/google/trillian",
 			"github.com/envoyproxy/go-control-plane",

diff --git a/cmd/cosign/cli/fulcio/fulcio.go b/cmd/cosign/cli/fulcio/fulcio.go
@@ -29,10 +29,10 @@ import (
 
 	"golang.org/x/term"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioroots"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/providers"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/fulcio/fulcioroots"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/pkg/cosign"
+	"github.com/sigstore/policy-controller/pkg/providers"
 	"github.com/sigstore/fulcio/pkg/api"
 	"github.com/sigstore/sigstore/pkg/oauthflow"
 	"github.com/sigstore/sigstore/pkg/signature"

diff --git a/cmd/cosign/cli/fulcio/fulcio_test.go b/cmd/cosign/cli/fulcio/fulcio_test.go
@@ -25,7 +25,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 	"github.com/sigstore/fulcio/pkg/api"
 	"github.com/sigstore/sigstore/pkg/oauthflow"
 )

diff --git a/cmd/cosign/cli/fulcio/fulcioroots/fulcioroots.go b/cmd/cosign/cli/fulcio/fulcioroots/fulcioroots.go
@@ -24,7 +24,7 @@ import (
 	"os"
 	"sync"
 
-	"github.com/sigstore/cosign/pkg/cosign/tuf"
+	"github.com/sigstore/policy-controller/pkg/cosign/tuf"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 )
 

diff --git a/cmd/cosign/cli/fulcio/fulcioroots/fulcioroots_test.go b/cmd/cosign/cli/fulcio/fulcioroots/fulcioroots_test.go
@@ -18,7 +18,7 @@ import (
 	"os"
 	"testing"
 
-	"github.com/sigstore/cosign/test"
+	"github.com/sigstore/policy-controller/test"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 )
 

diff --git a/cmd/cosign/cli/fulcio/fulcioverifier/ctl/verify.go b/cmd/cosign/cli/fulcio/fulcioverifier/ctl/verify.go
@@ -28,9 +28,9 @@ import (
 	ct "github.com/google/certificate-transparency-go"
 	ctx509 "github.com/google/certificate-transparency-go/x509"
 	"github.com/google/certificate-transparency-go/x509util"
-	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier/ctutil"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/fulcio/fulcioverifier/ctutil"
 
-	"github.com/sigstore/cosign/pkg/cosign/tuf"
+	"github.com/sigstore/policy-controller/pkg/cosign/tuf"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 )
 

diff --git a/cmd/cosign/cli/fulcio/fulcioverifier/fulcioverifier.go b/cmd/cosign/cli/fulcio/fulcioverifier/fulcioverifier.go
@@ -20,9 +20,9 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
-	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier/ctl"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/fulcio"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/fulcio/fulcioverifier/ctl"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func NewSigner(ctx context.Context, ko options.KeyOpts) (*fulcio.Signer, error) {

diff --git a/cmd/cosign/cli/generate.go b/cmd/cosign/cli/generate.go
@@ -18,8 +18,8 @@ package cli
 import (
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/generate"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/generate"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func Generate() *cobra.Command {

diff --git a/cmd/cosign/cli/generate/generate.go b/cmd/cosign/cli/generate/generate.go
@@ -21,8 +21,8 @@ import (
 	"io"
 
 	"github.com/google/go-containerregistry/pkg/name"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
-	ociremote "github.com/sigstore/cosign/pkg/oci/remote"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
+	ociremote "github.com/sigstore/policy-controller/pkg/oci/remote"
 	"github.com/sigstore/sigstore/pkg/signature/payload"
 )
 

diff --git a/cmd/cosign/cli/generate/generate_key_pair.go b/cmd/cosign/cli/generate/generate_key_pair.go
@@ -24,12 +24,12 @@ import (
 	"os"
 	"strings"
 
-	"github.com/sigstore/cosign/pkg/cosign/git"
-	"github.com/sigstore/cosign/pkg/cosign/git/github"
-	"github.com/sigstore/cosign/pkg/cosign/git/gitlab"
+	"github.com/sigstore/policy-controller/pkg/cosign/git"
+	"github.com/sigstore/policy-controller/pkg/cosign/git/github"
+	"github.com/sigstore/policy-controller/pkg/cosign/git/gitlab"
 
-	"github.com/sigstore/cosign/pkg/cosign"
-	"github.com/sigstore/cosign/pkg/cosign/kubernetes"
+	"github.com/sigstore/policy-controller/pkg/cosign"
+	"github.com/sigstore/policy-controller/pkg/cosign/kubernetes"
 	"github.com/sigstore/sigstore/pkg/cryptoutils"
 	"github.com/sigstore/sigstore/pkg/signature/kms"
 )

diff --git a/cmd/cosign/cli/generate_key_pair.go b/cmd/cosign/cli/generate_key_pair.go
@@ -18,8 +18,8 @@ package cli
 import (
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/generate"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/generate"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func GenerateKeyPair() *cobra.Command {

diff --git a/cmd/cosign/cli/import_key_pair.go b/cmd/cosign/cli/import_key_pair.go
@@ -18,8 +18,8 @@ package cli
 import (
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/importkeypair"
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/importkeypair"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func ImportKeyPair() *cobra.Command {

diff --git a/cmd/cosign/cli/importkeypair/import_key_pair.go b/cmd/cosign/cli/importkeypair/import_key_pair.go
@@ -21,7 +21,7 @@ import (
 	"io"
 	"os"
 
-	"github.com/sigstore/cosign/pkg/cosign"
+	"github.com/sigstore/policy-controller/pkg/cosign"
 )
 
 var (

diff --git a/cmd/cosign/cli/initialize.go b/cmd/cosign/cli/initialize.go
@@ -16,10 +16,10 @@
 package cli
 
 import (
-	"github.com/sigstore/cosign/cmd/cosign/cli/initialize"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/initialize"
 	"github.com/spf13/cobra"
 
-	"github.com/sigstore/cosign/cmd/cosign/cli/options"
+	"github.com/sigstore/policy-controller/cmd/cosign/cli/options"
 )
 
 func Initialize() *cobra.Command {

diff --git a/cmd/cosign/cli/initialize/init.go b/cmd/cosign/cli/initialize/init.go
@@ -21,8 +21,8 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"github.com/sigstore/cosign/pkg/blob"
-	"github.com/sigstore/cosign/pkg/cosign/tuf"
+	"github.com/sigstore/policy-controller/pkg/blob"
+	"github.com/sigstore/policy-controller/pkg/cosign/tuf"
 )
 
 func DoInitialize(ctx context.Context, root, mirror string) error {
-Original file line number
+Diff line change
@@ Expand Up / @@ -24,7 +24,7 @@ import ( @@
     	"os"
     	"sync"
-    	"github.com/sigstore/cosign/pkg/cosign/tuf"
+    	"github.com/sigstore/policy-controller/pkg/cosign/tuf"
     	"github.com/sigstore/sigstore/pkg/cryptoutils"
     )
@@ Expand Down @@