go.mod

module github.com/sigstore/cosign

go 1.16

require (
	cloud.google.com/go/storage v1.17.0
	github.com/cyberphone/json-canonicalization v0.0.0-20210823021906-dc406ceaf94b
	github.com/go-openapi/runtime v0.19.31
	github.com/go-openapi/strfmt v0.20.2
	github.com/go-openapi/swag v0.19.15
	github.com/go-piv/piv-go v1.8.0
	github.com/google/certificate-transparency-go v1.1.2-0.20210728111105-5f7e9ba4be3d
	github.com/google/go-cmp v0.5.6
	github.com/google/go-containerregistry v0.6.1-0.20210922191434-34b7f00d7a60
	github.com/google/trillian v1.3.14-0.20210713114448-df474653733c
	github.com/in-toto/in-toto-golang v0.3.2
	github.com/manifoldco/promptui v0.8.0
	github.com/pkg/errors v0.9.1
	github.com/sigstore/fulcio v0.1.2-0.20210831152525-42f7422734bb
	github.com/sigstore/rekor v0.3.0
	github.com/sigstore/sigstore v0.0.0-20211005102407-3ab959fb2809
	github.com/spf13/cobra v1.2.1
	github.com/stretchr/testify v1.7.0
	github.com/theupdateframework/go-tuf v0.0.0-20210722233521-90e262754396
	golang.org/x/term v0.0.0-20210927222741-03fcf44c2211
	google.golang.org/api v0.58.0
	k8s.io/api v0.21.4
	k8s.io/apimachinery v0.21.4
	k8s.io/client-go v0.21.4
	knative.dev/pkg v0.0.0-20211004133827-74ac82a333a4
)

require (
	cloud.google.com/go/kms v1.0.0 // indirect
	github.com/cespare/xxhash/v2 v2.1.2 // indirect
	github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4 // indirect
	github.com/cpuguy83/go-md2man/v2 v2.0.1 // indirect
	github.com/envoyproxy/protoc-gen-validate v0.6.1 // indirect
	github.com/form3tech-oss/jwt-go v3.2.5+incompatible // indirect
	github.com/fsnotify/fsnotify v1.5.1 // indirect
	github.com/golang/glog v1.0.0 // indirect
	github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20211004163346-9ae11fe20941
	github.com/imdario/mergo v0.3.12 // indirect
	github.com/mattn/go-runewidth v0.0.13 // indirect
	github.com/onsi/gomega v1.16.0 // indirect
	github.com/prometheus/procfs v0.7.3 // indirect
	github.com/secure-systems-lab/go-securesystemslib v0.1.0
	github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613
	github.com/urfave/cli v1.22.5 // indirect
	go.opentelemetry.io/contrib v0.24.0 // indirect
	go.opentelemetry.io/proto/otlp v0.9.0 // indirect
	golang.org/x/mod v0.5.1 // indirect
	golang.org/x/text v0.3.7 // indirect
	golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac // indirect
	k8s.io/klog/v2 v2.20.0 // indirect
	k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b // indirect
)