Merge pull request #290 from sylabs/dependabot/go_modules/main/github.com/secure-systems-lab/go-securesystemslib-0.6.0

build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.5.0 to 0.6.0

Author: tri-adam

go.mod

@@ -6,7 +6,7 @@ require (
 github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8
 github.com/google/uuid v1.3.0
 github.com/sebdah/goldie/v2 v2.5.3
-github.com/secure-systems-lab/go-securesystemslib v0.5.0
+github.com/secure-systems-lab/go-securesystemslib v0.6.0
 github.com/sigstore/sigstore v1.6.3
 github.com/spf13/cobra v1.7.0
 github.com/spf13/pflag v1.0.5

go.sum

@@ -49,8 +49,8 @@ github.com/prometheus/procfs v0.8.0 h1:ODq8ZFEaYeCaZOJlZZdJA2AbQR98dSHSM1KW/You5
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/sebdah/goldie/v2 v2.5.3 h1:9ES/mNN+HNUbNWpVAlrzuZ7jE+Nrczbj8uFRjM7624Y=
 github.com/sebdah/goldie/v2 v2.5.3/go.mod h1:oZ9fp0+se1eapSRjfYbsV/0Hqhbuu3bJVvKI/NNtssI=
-github.com/secure-systems-lab/go-securesystemslib v0.5.0 h1:oTiNu0QnulMQgN/hLK124wJD/r2f9ZhIUuKIeBsCBT8=
-github.com/secure-systems-lab/go-securesystemslib v0.5.0/go.mod h1:uoCqUC0Ap7jrBSEanxT+SdACYJTVplRXWLkGMuDjXqk=
+github.com/secure-systems-lab/go-securesystemslib v0.6.0 h1:T65atpAVCJQK14UA57LMdZGpHi4QYSH/9FZyNGqMYIA=
+github.com/secure-systems-lab/go-securesystemslib v0.6.0/go.mod h1:8Mtpo9JKks/qhPG4HGZ2LGMvrPbzuxwfz/f/zLfEWkk=
 github.com/sergi/go-diff v1.0.0/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAmXWZgo=
 github.com/sergi/go-diff v1.2.0 h1:XU+rvMAioB0UC3q1MFrIQy4Vo5/4VsRDQQXHsEya6xQ=
 github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=

pkg/integrity/dsse.go

@@ -41,7 +41,7 @@ func newDSSEEncoder(ss []signature.Signer, opts ...signature.SignOption) (*dsseE
 opts = append(opts, options.WithCryptoSignerOpts(so))
 }
 
-dss := make([]dsse.SignVerifier, 0, len(ss))
+dss := make([]dsse.SignerVerifier, 0, len(ss))
 for _, s := range ss {
 ds, err := newDSSESigner(s, opts...)
 if err != nil {
@@ -141,7 +141,7 @@ type dsseSigner struct {
 pub crypto.PublicKey
 }
 
-// newDSSESigner returns a dsse.SignVerifier that uses s to sign according to opts. Note that the
+// newDSSESigner returns a dsse.SignerVerifier that uses s to sign according to opts. Note that the
 // returned value is suitable only for signing, and not verification.
 func newDSSESigner(s signature.Signer, opts ...signature.SignOption) (*dsseSigner, error) {
 pub, err := s.PublicKey()
@@ -166,7 +166,7 @@ func (s *dsseSigner) Sign(ctx context.Context, data []byte) ([]byte, error) {
 
 var errSignNotImplemented = errors.New("sign not implemented")
 
-// Verify is not implemented, but required for the dsse.SignVerifier interface.
+// Verify is not implemented, but required for the dsse.SignerVerifier interface.
 func (s *dsseSigner) Verify(_ context.Context, _, _ []byte) error {
 return errSignNotImplemented
 }