ci: Update golang version for CLI tests (#1453)

Author: lucchmielowski

.github/workflows/ci.yml

@@ -47,7 +47,7 @@ jobs:
       - name: Set up Go 
         uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
-          go-version: ~1.25.3
+          go-version: ~1.25.8
       - name: Test Policy
         run: go run ./cmd/cli/kubectl-kyverno test ../policies
         working-directory: kyverno
@@ -69,7 +69,7 @@ jobs:
       - name: Set up Go 
         uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
-          go-version: ~1.25.3
+          go-version: ~1.25.8
       - name: Lint policies
         run: |
           set -e

other-mpol/replace-image-registry/artifacthub-pkg.yml

@@ -19,4 +19,4 @@ annotations:
   kyverno/category: "Sample"
   kyverno/kubernetesVersion: "1.23"
   kyverno/subject: "Pod"
-digest: 2463c641a775bf52901516d24d5a6898298a630ed7b6ec981dcee3354e798a38
+digest: 2be43b9a23807316228e9e30b89c619113b84cf96cff589447b9219837d54562

other-mpol/replace-image-registry/replace-image-registry.yaml

@@ -22,15 +22,7 @@ spec:
         apiVersions: ["v1"]
         operations: ["CREATE", "UPDATE"]
         resources: ["pods"]
-  
-  variables:
-    - name: stripRegistry
-      expression: |
-        string(img) => 
-          img.contains('/') && img.split('/')[0].contains('.') ? 
-            img.split('/', 2)[1] : 
-            img
-  
+
   mutations:
     - patchType: ApplyConfiguration
       applyConfiguration:
@@ -64,4 +56,4 @@ spec:
       enabled: true
 
   webhookConfiguration:
-    timeoutSeconds: 10
+    timeoutSeconds: 10

other/block-stale-images/.chainsaw-test/pods-good.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   containers:
   - name: kyverno 
-    image: kyverno:latest
+    image: ghcr.io/kyverno/kyverno:latest
   - name: kyverno02
     image: ghcr.io/kyverno/kyverno:latest
 ---

other/block-stale-images/artifacthub-pkg.yml

@@ -19,4 +19,4 @@ annotations:
   kyverno/category: "Other"
   kyverno/kubernetesVersion: "1.23"
   kyverno/subject: "Pod"
-digest: 4c840db89d0d4d8d79c3ef120d319a93d62638f3e6c82ccbdf863b4f3d60b7aa
+digest: 1eb8ff932d2d9b35a2eb6876bf2a2ff3522dc1840076a315ff2996cbb3ea21be

other/block-stale-images/block-stale-images.yaml

@@ -30,7 +30,7 @@ spec:
           context:
           - name: imageData
             imageRegistry:
-              reference: "{{ element.image }}"
+              reference: '{{ element.image }}'
           deny:
             conditions:
               all:

other/verify-image-ivpol/.chainsaw-test/bad.yaml

@@ -5,5 +5,5 @@ metadata:
 spec:
   containers:
     - name: test-container
-      image: 'docker.io/mohdcode/kyverno@sha256:b178bb94b508183cddda73829e007c7ae2c6996324b2fc1f1746f2281e635f7a'
+      image: 'ghcr.io/kyverno/test-verify-image:unsigned'
       imagePullPolicy: Always

other/verify-image-ivpol/.chainsaw-test/good.yaml

@@ -5,5 +5,5 @@ metadata:
 spec:
   containers:
     - name: test-container
-      image: 'docker.io/mohdcode/kyverno@sha256:2215deb786eb4039647d8d2881d1b5290ec2c200e14ba1535b0cdd58b69a1bcf'
+      image: 'ghcr.io/kyverno/test-verify-image:signed'
       imagePullPolicy: Always

other/verify-image-ivpol/.chainsaw-test/policy-ready.yaml

@@ -4,13 +4,13 @@ metadata:
   name: verify-image-ivpol
 status:
   conditionStatus:
-            (conditions[?type == 'RBACPermissionsGranted']):
-            - message: Policy is ready for reporting.
-              reason: Succeeded
-              status: "True"
-            (conditions[?type == 'WebhookConfigured']):
-            - message: Webhook configured.
-              reason: Succeeded
-              status: "True"
-              type: WebhookConfigured
+    (conditions[?type == 'RBACPermissionsGranted']):
+    - message: Policy is ready for reporting.
+      reason: Succeeded
+      status: "True"
+    (conditions[?type == 'WebhookConfigured']):
+    - message: Webhook configured.
+      reason: Succeeded
+      status: "True"
+      type: WebhookConfigured
 

other/verify-image-ivpol/artifacthub-pkg.yml

@@ -19,4 +19,4 @@ readme: |
 annotations:
   kyverno/category: "Software Supply Chain Security, EKS Best Practices"
   kyverno/subject: "Pod"
-digest: c315f0db7538deb20debade15ceb0fcbbdf4e526512acac6af95048dd1ecb0e5
+digest: d15b7c6c473fd34424da705a54a27f2bd8d57c2ebf7dde140b8bed6199630c5f