update dependency

Signed-off-by: jason yang <[email protected]>
JasonYangShadow · Nov 5, 2024 · 53abd33 · 53abd33
1 parent b3fe5b1
commit 53abd33
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 10 deletions.
diff --git a/LICENSE_DEPENDENCIES.md b/LICENSE_DEPENDENCIES.md
@@ -381,7 +381,7 @@ The dependencies and their licenses are as follows:
 
 **License:** Apache-2.0
 
-**License URL:** <https://github.com/sigstore/sigstore/blob/v1.8.8/LICENSE>
+**License URL:** <https://github.com/sigstore/sigstore/blob/v1.8.10/LICENSE>
 
 ## github.com/spf13/cobra
 
@@ -519,7 +519,7 @@ The dependencies and their licenses are as follows:
 
 **License:** BSD-3-Clause
 
-**License URL:** <https://github.com/apptainer/sif/blob/v2.15.2/LICENSE.md>
+**License URL:** <https://github.com/jasonyangshadow/sif/blob/b39af75e83af/LICENSE.md>
 
 ## github.com/cloudflare/circl
 

diff --git a/go.mod b/go.mod
@@ -9,7 +9,6 @@ require (
 	github.com/apex/log v1.9.0
 	github.com/apptainer/container-key-client v0.8.0
 	github.com/apptainer/container-library-client v1.4.6
-	github.com/apptainer/sif/v2 v2.15.2
 	github.com/astromechza/etcpwdparse v0.0.0-20170319193008-f0e5f0779716
 	github.com/blang/semver/v4 v4.0.0
 	github.com/buger/goterm v1.0.4
@@ -38,7 +37,7 @@ require (
 	github.com/seccomp/containers-golang v0.6.0
 	github.com/seccomp/libseccomp-golang v0.10.0
 	github.com/shopspring/decimal v1.4.0
-	github.com/sigstore/sigstore v1.8.8
+	github.com/sigstore/sigstore v1.8.10
 	github.com/spf13/cobra v1.8.1
 	github.com/spf13/pflag v1.0.5
 	github.com/sylabs/json-resp v0.9.4
@@ -54,6 +53,7 @@ require (
 
 require (
 	github.com/BurntSushi/toml v1.4.0
+	github.com/apptainer/sif/v2 v2.14.0
 	github.com/docker/cli v27.3.1+incompatible
 	github.com/docker/distribution v2.8.3+incompatible
 	github.com/google/go-containerregistry v0.20.2
@@ -150,7 +150,6 @@ require (
 	github.com/rootless-containers/proto v0.1.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/safchain/ethtool v0.4.0 // indirect
-	github.com/sebdah/goldie/v2 v2.5.5 // indirect
 	github.com/secure-systems-lab/go-securesystemslib v0.8.0 // indirect
 	github.com/sigstore/fulcio v1.4.5 // indirect
 	github.com/sigstore/rekor v1.3.6 // indirect
@@ -179,4 +178,8 @@ require (
 	google.golang.org/protobuf v1.34.2 // indirect
 )
 
-replace oras.land/oras-go => github.com/sylabs/oras-go v1.2.4-0.20230628133146-a64659fc0454
+replace (
+	github.com/apptainer/sif/v2 v2.14.0 => github.com/jasonyangshadow/sif/v2 v2.0.0-20241105060314-b39af75e83af
+	github.com/apptainer/sif/v2 v2.15.2 => github.com/jasonyangshadow/sif/v2 v2.0.0-20241105060314-b39af75e83af
+	oras.land/oras-go => github.com/sylabs/oras-go v1.2.4-0.20230628133146-a64659fc0454
+)
diff --git a/go.sum b/go.sum
@@ -38,8 +38,6 @@ github.com/apptainer/container-key-client v0.8.0 h1:K181Zrejb53mR2YQZwCathSj8YRe
 github.com/apptainer/container-key-client v0.8.0/go.mod h1:wMeJdiMXlPRiwJfUyae2WRHsZlHG9Af6iPQ9TZcBnS8=
 github.com/apptainer/container-library-client v1.4.6 h1:QhZmVilRe2TipRHvZwBwCyP8OrwRTriQL27SyOU9yhw=
 github.com/apptainer/container-library-client v1.4.6/go.mod h1:qU1wQqR1tVUzD3BJuOrfHNW+W3a/cNYtaXQNFLDEkvs=
-github.com/apptainer/sif/v2 v2.15.2 h1:/DnBetFCACXZc2zK4tZdjhrTb8THKVtW0d0KwdqwyZQ=
-github.com/apptainer/sif/v2 v2.15.2/go.mod h1:vIOmyKT2+cpjOidSfP11rNJLwabBuRxU7BnHb6ETQzE=
 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so=
 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw=
 github.com/astromechza/etcpwdparse v0.0.0-20170319193008-f0e5f0779716 h1:MWNxJj2HIBx5Skyz30rxjHkXwGCr05O2bAz0VrwgADM=
@@ -244,6 +242,8 @@ github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
+github.com/jasonyangshadow/sif/v2 v2.0.0-20241105060314-b39af75e83af h1:Z8qTPaYCM+P8+e1fe29iXQj1ccRYXg0laXjx7H1qZp8=
+github.com/jasonyangshadow/sif/v2 v2.0.0-20241105060314-b39af75e83af/go.mod h1:B5DeGwtDJiuQcFp4MCdbONijsyDcvKS6B7h1xCgLpRM=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmhodges/clock v1.2.0 h1:eq4kys+NI0PLngzaHEe7AmPT90XMGIEySD1JfV1PDIs=
 github.com/jmhodges/clock v1.2.0/go.mod h1:qKjhA7x7u/lQpPB1XAqX1b1lCI/w3/fNuYpI/ZjLynI=
@@ -430,8 +430,8 @@ github.com/sigstore/fulcio v1.4.5 h1:WWNnrOknD0DbruuZWCbN+86WRROpEl3Xts+WT2Ek1yc
 github.com/sigstore/fulcio v1.4.5/go.mod h1:oz3Qwlma8dWcSS/IENR/6SjbW4ipN0cxpRVfgdsjMU8=
 github.com/sigstore/rekor v1.3.6 h1:QvpMMJVWAp69a3CHzdrLelqEqpTM3ByQRt5B5Kspbi8=
 github.com/sigstore/rekor v1.3.6/go.mod h1:JDTSNNMdQ/PxdsS49DJkJ+pRJCO/83nbR5p3aZQteXc=
-github.com/sigstore/sigstore v1.8.8 h1:B6ZQPBKK7Z7tO3bjLNnlCMG+H66tO4E/+qAphX8T/hg=
-github.com/sigstore/sigstore v1.8.8/go.mod h1:GW0GgJSCTBJY3fUOuGDHeFWcD++c4G8Y9K015pwcpDI=
+github.com/sigstore/sigstore v1.8.10 h1:r4t+TYzJlG9JdFxMy+um9GZhZ2N1hBTyTex0AHEZxFs=
+github.com/sigstore/sigstore v1.8.10/go.mod h1:BekjqxS5ZtHNJC4u3Q3Stvfx2eyisbW/lUZzmPU2u4A=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.3.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=