chore: Remove dependency on github.com/pkg/errors (#1233)

This can be handled by the stdlib fmt package.

Signed-off-by: James Alseth <james@jalseth.me>

Author: jalseth

go.mod

@@ -24,7 +24,6 @@ require (
 	github.com/open-policy-agent/opa v1.11.0
 	github.com/opencontainers/image-spec v1.1.1
 	github.com/owenrumney/go-sarif/v2 v2.3.3
-	github.com/pkg/errors v0.9.1
 	github.com/shteou/go-ignore v0.3.1
 	github.com/spdx/tools-golang v0.5.5
 	github.com/spf13/cobra v1.10.1
@@ -125,6 +124,7 @@ require (
 	github.com/olekukonko/ll v0.0.9 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
 	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect

parser/cyclonedx/cyclonedx_test.go

@@ -2,11 +2,11 @@ package cyclonedx
 
 import (
 	"testing"
-
-	"github.com/pkg/errors"
 )
 
 func TestCycloneDXParserValid(t *testing.T) {
+	t.Parallel()
+
 	// generated by syft packages docker:devopps/busybox:latest -o cyclonedx --file report.xml
 	// cat report.xml | cyclonedx-cli convert --input-format xml --output-format json
 	sbom := `{
@@ -62,6 +62,8 @@ func TestCycloneDXParserValid(t *testing.T) {
 }
 
 func TestCycloneDXParserInValid(t *testing.T) {
+	t.Parallel()
+
 	// generated by syft packages docker:devopps/busybox:latest -o cyclonedx --file report.xml
 	// cat report.xml | cyclonedx-cli convert --input-format xml --output-format json
 	sbom := `{
@@ -111,12 +113,7 @@ func TestCycloneDXParserInValid(t *testing.T) {
 	component := metadata.(map[string]any)["component"]
 	currentSHA256 := component.(map[string]any)["version"]
 
-	var err error
-	if expectedSHA256 != currentSHA256 {
-		err = errors.Errorf("current SHA256 %s is different from the expected SHA256 %s", currentSHA256, expectedSHA256)
-	}
-
-	if err == nil {
+	if expectedSHA256 == currentSHA256 {
 		t.Error("current SHA256 and expected SHA256 should not be equal")
 	}
 }