.local is reserved for local-area networks, and .localhost is reserved for loopback devices. Using .test allows easier usage for different test setups.

 * https://www.rfc-editor.org/rfc/rfc2606#section-2 defines the "test." top level domain and "localhost.".
* https://www.rfc-editor.org/rfc/rfc6761.html#section-6.2 explains how different implementations can use "test.".

 HTML links can be adjusted right now, go module paths will have to wait a bit.

use a better phrasing

reformat a bit

docs: add link update alert to README.md

 Add zip as packages to be installed in preparation as
 the `make dist` target uses it.

 * Change the go module path
   from github.com/csaf-poc/csaf_distribution to github.com/gocsaf/csaf.
 * Rename archive for release tarballs.
 * Adjust testing scripts and documentation.

improve test setup scripts by adding missing package

 * Change Makefile to remove the leading `v` from the git tag
   in the case of release tags. Previously this was only done for
   pre-release git tags.

This option was in conflict with the help display.

This allows other programs like google/licensecheck to correctly
detect the license. This is required to display the documentation
in `pkg.go.dev`.

Update README.md that go paths can be adjusted

…24_11_22

Update Go 3rd party libs

Add required upload permissions

Fix typo in error message

This makes it consistent with the handling of schema
validation.

Warn if no remote validator was specified

Add Apache 2.0 license to root folder

Update README.md to exchange csaf.io until it is fixed

Errors for lookup checks

 * Update runner to ubuntu-22.04 which is the eldest to be supported
   by github from 2025-04-01.
 * Update github actions and go version needed.

update runner for release to 22.04, other actions and go version, thus also newer glibc

* Add example for iterating product id and product helper

* simplify code a bit

* Remove newline

---------

Co-authored-by: Sascha L. Teichmann <sascha.teichmann@intevation.de>

Closes gocsaf#607

Add documentation for externally signed documents

…egator (gocsaf#618)

Improve SHA* marking