grafeas / voucher

🎟 Voucher creates attestations for Binary Authorization
Apache License 2.0
73 stars 24 forks source link

Silence golangci openpgp #72

Closed thepwagner closed 1 year ago

thepwagner commented 1 year ago

In https://github.com/grafeas/voucher/actions/runs/3440583419/jobs/5739216775 , we can observe that CI is failing because of an unmaintained dependency.

Error: SA1019: "golang.org/x/crypto/openpgp/packet" is deprecated: this package is unmaintained except for security fixes. New applications should consider a more focused, modern alternative to OpenPGP for their specific task. If you are required to interoperate with OpenPGP systems and need a maintained package, consider a community fork. See https://golang.org/issue/44226. (staticcheck)

We should either fix that, or remove the PGP code (because it's secondary to the KMS+containeranalysis path).

This PR takes a minimal approach by silencing the warning, so other changes aren't blocked on this.

It also removes golint and rules, because it has been deprecated since golangci-lint-1.41.