@@ -71,7 +71,7 @@ require (
7171 github.com/microsoftgraph/msgraph-sdk-go-core v1.4.0
7272 github.com/mikefarah/yq/v4 v4.47.2
7373 github.com/mitchellh/gox v1.0.1
74- github.com/open-policy-agent/opa v1.7.1
74+ github.com/open-policy-agent/opa v1.8.0
7575 github.com/pierrre/gotestcover v0.0.0-20160517101806-924dca7d15f0
7676 github.com/samber/lo v1.51.0
7777 github.com/spf13/viper v1.21.0
@@ -125,11 +125,13 @@ require (
125125 cloud.google.com/go/auth v0.17.0 // indirect
126126 cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
127127 cloud.google.com/go/monitoring v1.24.3 // indirect
128+ cloud.google.com/go/spanner v1.87.0 // indirect
128129 dario.cat/mergo v1.0.2 // indirect
129130 github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry v0.2.3 // indirect
130131 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4 v4.8.0 // indirect
131132 github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
132133 github.com/DataDog/zstd v1.5.7 // indirect
134+ github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp v1.5.3 // indirect
133135 github.com/Intevation/gval v1.3.0 // indirect
134136 github.com/Intevation/jsonpath v0.2.1 // indirect
135137 github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
@@ -157,7 +159,9 @@ require (
157159 github.com/containerd/log v0.1.0 // indirect
158160 github.com/containerd/platforms v1.0.0-rc.1 // indirect
159161 github.com/containerd/plugin v1.0.0 // indirect
162+ github.com/coreos/go-oidc/v3 v3.14.1 // indirect
160163 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
164+ github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
161165 github.com/dgraph-io/badger/v4 v4.8.0 // indirect
162166 github.com/dgraph-io/ristretto/v2 v2.2.0 // indirect
163167 github.com/digitorus/pkcs7 v0.0.0-20250730155240-ffadbf3f398c // indirect
@@ -172,7 +176,7 @@ require (
172176 github.com/fvbommel/sortorder v1.1.0 // indirect
173177 github.com/fxamacker/cbor/v2 v2.9.0 // indirect
174178 github.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 // indirect
175- github.com/go-chi/chi v4.1.2+incompatible // indirect
179+ github.com/go-chi/chi/v5 v5.2.3 // indirect
176180 github.com/go-git/go-git/v5 v5.16.4 // indirect
177181 github.com/go-jose/go-jose/v4 v4.1.3 // indirect
178182 github.com/go-json-experiment/json v0.0.0-20251027170946-4849db3c2f7e // indirect
@@ -191,14 +195,21 @@ require (
191195 github.com/gocsaf/csaf/v3 v3.3.0 // indirect
192196 github.com/gofrs/uuid/v5 v5.4.0 // indirect
193197 github.com/gohugoio/hashstructure v0.6.0 // indirect
194- github.com/google/certificate-transparency-go v1.1.8 // indirect
198+ github.com/google/certificate-transparency-go v1.3.2 // indirect
195199 github.com/google/gnostic-models v0.7.1 // indirect
196200 github.com/google/go-github/v62 v62.0.0 // indirect
197201 github.com/google/go-querystring v1.1.0 // indirect
198202 github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 // indirect
199203 github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
204+ github.com/in-toto/attestation v1.1.2 // indirect
200205 github.com/jcmturner/goidentity/v6 v6.0.1 // indirect
201206 github.com/jedisct1/go-minisign v0.0.0-20241212093149-d2f9f49435c7 // indirect
207+ github.com/lestrrat-go/blackmagic v1.0.4 // indirect
208+ github.com/lestrrat-go/httpcc v1.0.1 // indirect
209+ github.com/lestrrat-go/httprc/v3 v3.0.0 // indirect
210+ github.com/lestrrat-go/jwx/v3 v3.0.10 // indirect
211+ github.com/lestrrat-go/option v1.0.1 // indirect
212+ github.com/lestrrat-go/option/v2 v2.0.0 // indirect
202213 github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
203214 github.com/mattn/go-shellwords v1.0.12 // indirect
204215 github.com/microsoft/kiota-authentication-azure-go v1.3.1 // indirect
@@ -207,7 +218,7 @@ require (
207218 github.com/microsoft/kiota-serialization-json-go v1.1.2 // indirect
208219 github.com/microsoft/kiota-serialization-multipart-go v1.1.2 // indirect
209220 github.com/microsoft/kiota-serialization-text-go v1.1.2 // indirect
210- github.com/mitchellh/mapstructure v1.5.0 // indirect
221+ github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c // indirect
211222 github.com/moby/docker-image-spec v1.3.1 // indirect
212223 github.com/moby/moby/api v1.52.0 // indirect
213224 github.com/moby/moby/client v0.2.1 // indirect
@@ -219,7 +230,7 @@ require (
219230 github.com/ncruces/go-strftime v0.1.9 // indirect
220231 github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
221232 github.com/oklog/ulid/v2 v2.1.1 // indirect
222- github.com/openvex/discovery v0.1.1-0.20240802171711-7c54efc57553 // indirect
233+ github.com/openvex/discovery v0.1.1-0.20251205165335-709425da9ac4 // indirect
223234 github.com/pkg/errors v0.9.1 // indirect
224235 github.com/planetscale/vtprotobuf v0.6.1-0.20250313105119-ba97887b0a25 // indirect
225236 github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c // indirect
@@ -228,20 +239,29 @@ require (
228239 github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
229240 github.com/sassoftware/go-rpmutils v0.4.0 // indirect
230241 github.com/sassoftware/relic v7.2.1+incompatible // indirect
242+ github.com/segmentio/asm v1.2.0 // indirect
243+ github.com/segmentio/ksuid v1.0.4 // indirect
231244 github.com/shirou/gopsutil/v4 v4.25.11 // indirect
232- github.com/sigstore/cosign/v2 v2.2.4 // indirect
245+ github.com/sigstore/cosign/v2 v2.6.1 // indirect
233246 github.com/sigstore/protobuf-specs v0.5.0 // indirect
234- github.com/sigstore/sigstore v1.9.5 // indirect
235- github.com/sigstore/timestamp-authority v1.2.2 // indirect
247+ github.com/sigstore/rekor-tiles v0.1.11 // indirect
248+ github.com/sigstore/sigstore v1.9.6-0.20250729224751-181c5d3339b3 // indirect
249+ github.com/sigstore/sigstore-go v1.1.3 // indirect
250+ github.com/sigstore/timestamp-authority v1.2.9 // indirect
251+ github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
236252 github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
237253 github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
238254 github.com/std-uritemplate/std-uritemplate/go/v2 v2.0.5 // indirect
239255 github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
240256 github.com/testcontainers/testcontainers-go v0.39.0 // indirect
241257 github.com/theupdateframework/go-tuf v0.7.0 // indirect
258+ github.com/theupdateframework/go-tuf/v2 v2.2.0 // indirect
242259 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
243260 github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 // indirect
261+ github.com/transparency-dev/formats v0.0.0-20250421220931-bb8ad4d07c26 // indirect
244262 github.com/transparency-dev/merkle v0.0.2 // indirect
263+ github.com/transparency-dev/tessera v1.0.0-rc3 // indirect
264+ github.com/valyala/fastjson v1.6.4 // indirect
245265 github.com/vektah/gqlparser/v2 v2.5.30 // indirect
246266 github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
247267 github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
@@ -442,7 +462,7 @@ require (
442462 github.com/jinzhu/copier v0.4.0 // indirect
443463 github.com/jmespath/go-jmespath v0.4.1-0.20220621161143-b0104c826a24 // indirect
444464 github.com/jmoiron/sqlx v1.4.0 // indirect
445- github.com/jonboulle/clockwork v0.4 .0 // indirect
465+ github.com/jonboulle/clockwork v0.5 .0 // indirect
446466 github.com/josephspurrier/goversioninfo v1.5.0 // indirect
447467 github.com/json-iterator/go v1.1.12 // indirect
448468 github.com/kevinburke/ssh_config v1.2.0 // indirect
@@ -492,7 +512,7 @@ require (
492512 github.com/opencontainers/image-spec v1.1.1 // indirect
493513 github.com/opencontainers/runtime-spec v1.2.1 // indirect
494514 github.com/opencontainers/selinux v1.13.1 // indirect
495- github.com/openvex/go-vex v0.2.5 // indirect
515+ github.com/openvex/go-vex v0.2.7 // indirect
496516 github.com/owenrumney/go-sarif/v2 v2.3.3 // indirect
497517 github.com/owenrumney/squealer v1.2.11 // indirect
498518 github.com/package-url/packageurl-go v0.1.3 // indirect
@@ -515,7 +535,7 @@ require (
515535 github.com/sergi/go-diff v1.4.0 // indirect
516536 github.com/shibumi/go-pathspec v1.3.0 // indirect
517537 github.com/shopspring/decimal v1.4.0 // indirect
518- github.com/sigstore/rekor v1.4.0 // indirect
538+ github.com/sigstore/rekor v1.4.2 // indirect
519539 github.com/sirupsen/logrus v1.9.3 // indirect
520540 github.com/skeema/knownhosts v1.3.1 // indirect
521541 github.com/spdx/tools-golang v0.5.5 // indirect
0 commit comments