Project import generated by Copybara.

GitOrigin-RevId: ece58b16ad2d541f0946e92d42109e5347c75411

Author: bi-ci-bot

.golangci.yml

@@ -4,8 +4,6 @@
 linters:
   disable-all: true
   enable:
-    - deadcode
-    - depguard
     - dogsled
     - errcheck
     - gofmt

Dockerfile.build

@@ -1,4 +1,4 @@
-FROM golang:1.18
+FROM golang:1.25.1
 
 WORKDIR /src
 

action.yml

@@ -36,7 +36,7 @@ outputs:
 
 runs:
   using: docker
-  image: docker://docker.io/byndid/auth-commit-sig:1.0.0
+  image: docker://docker.io/byndid/auth-commit-sig:1.1.0-rc1
   env:
     API_TOKEN: ${{ inputs.api_token }}
     ALLOWLIST_CONFIG_FILE_PATH: ${{ inputs.allowlist_config_file_path }}

action/allowlist.go

@@ -2,8 +2,8 @@ package action
 
 import (
 	"fmt"
-	"io/ioutil"
 	"log"
+	"os"
 	"strings"
 
 	"github.com/ProtonMail/go-crypto/openpgp"
@@ -59,7 +59,7 @@ func LoadAllowlistYAML(filePath string) (*AllowlistYAML, error) {
 		log.Println("No allowlist configured")
 		return &AllowlistYAML{}, nil
 	}
-	yfile, err := ioutil.ReadFile(filePath)
+	yfile, err := os.ReadFile(filePath)
 	if err != nil {
 		return nil, fmt.Errorf(`failed to read allowlist yaml configuration file at '%s': %w`, filePath, err)
 	}

action/api.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"io/ioutil"
+	"io"
 	"net/http"
 	"net/url"
 	"path"
@@ -58,7 +58,7 @@ func (a Authorization) PrettyPrint() string {
 	return string(bs)
 }
 
-//	GPGKey contains the GPG public key.
+// GPGKey contains the GPG public key.
 type GPGKey struct {
 	// ID is the Beyond Identity ID of the GPG key.
 	ID string `json:"id"`
@@ -96,7 +96,7 @@ func (c APIClient) GetAuthorization(ctx context.Context, keyID, committerEmail s
 	}
 
 	defer resp.Body.Close()
-	body, err := ioutil.ReadAll(resp.Body)
+	body, err := io.ReadAll(resp.Body)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read api response: %w", err)
 	}

action/git.go

@@ -2,7 +2,7 @@ package action
 
 import (
 	"fmt"
-	"io/ioutil"
+	"io"
 
 	git "github.com/go-git/go-git/v5"
 	"github.com/go-git/go-git/v5/plumbing"
@@ -43,7 +43,7 @@ func PrettyPrintCommit(commit *object.Commit) string {
 		panic(err)
 	}
 
-	bs, err := ioutil.ReadAll(r)
+	bs, err := io.ReadAll(r)
 	if err != nil {
 		panic(err)
 	}
@@ -65,7 +65,7 @@ func EncodedCommitWithoutSignature(commit *object.Commit) (string, error) {
 		return "", fmt.Errorf("failed to build reader: %w", err) // should never happen
 	}
 
-	encoded, err := ioutil.ReadAll(r)
+	encoded, err := io.ReadAll(r)
 	if err != nil {
 		return "", fmt.Errorf("failed to read from encoding: %w", err) // should never happen
 	}

go.mod

@@ -1,29 +1,31 @@
 module byndid/auth-commit-sig
 
-go 1.18
+go 1.23.0
 
 require (
-	github.com/ProtonMail/go-crypto v0.0.0-20210428141323-04723f9f07d7
-	github.com/go-git/go-git/v5 v5.4.2
+	github.com/ProtonMail/go-crypto v1.1.6
+	github.com/go-git/go-git/v5 v5.16.4
 	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
-	github.com/Microsoft/go-winio v0.4.16 // indirect
-	github.com/acomagu/bufpipe v1.0.3 // indirect
-	github.com/cloudflare/circl v1.2.0 // indirect
-	github.com/emirpasic/gods v1.12.0 // indirect
-	github.com/go-git/gcfg v1.5.0 // indirect
-	github.com/go-git/go-billy/v5 v5.3.1 // indirect
-	github.com/imdario/mergo v0.3.12 // indirect
+	dario.cat/mergo v1.0.0 // indirect
+	github.com/Microsoft/go-winio v0.6.2 // indirect
+	github.com/cloudflare/circl v1.6.1 // indirect
+	github.com/cyphar/filepath-securejoin v0.4.1 // indirect
+	github.com/emirpasic/gods v1.18.1 // indirect
+	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
+	github.com/go-git/go-billy/v5 v5.6.2 // indirect
+	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
-	github.com/kevinburke/ssh_config v0.0.0-20201106050909-4977a11b4351 // indirect
-	github.com/mitchellh/go-homedir v1.1.0 // indirect
-	github.com/sergi/go-diff v1.1.0 // indirect
-	github.com/xanzy/ssh-agent v0.3.0 // indirect
-	golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90 // indirect
-	golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 // indirect
-	golang.org/x/sys v0.0.0-20220315194320-039c03cc5b86 // indirect
+	github.com/kevinburke/ssh_config v1.2.0 // indirect
+	github.com/pjbgf/sha1cd v0.3.2 // indirect
+	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
+	github.com/skeema/knownhosts v1.3.1 // indirect
+	github.com/xanzy/ssh-agent v0.3.3 // indirect
+	golang.org/x/crypto v0.37.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 )