build with go1.23 and general housekeeping

Signed-off-by: cpanato <[email protected]>

.github/workflows/build.yaml

@@ -13,6 +13,7 @@ jobs:
       matrix:
         go-version:
           - '1.22'
+          - '1.23'
 
     name: Build ${{ matrix.go-version }}
     runs-on: ubuntu-latest

.github/workflows/image.yaml

@@ -27,7 +27,6 @@ jobs:
       - name: Publish and sign image
         env:
           KO_DOCKER_REPO: ghcr.io/${{ github.repository }}
-          COSIGN_EXPERIMENTAL: 'true'
         run: |
           go build ./
           echo "${{ github.token }}" | ./ko login ghcr.io --username "${{ github.actor }}" --password-stdin

.github/workflows/kind-e2e.yaml

@@ -30,7 +30,7 @@ jobs:
       run: go install ./
 
     - name: Setup Cluster
-      uses: chainguard-dev/actions/setup-kind@f94883c3bd16936401291899070258f855b5d849 # main
+      uses: chainguard-dev/actions/setup-kind@29fb6e979a0b3efc79748a17e8cec08d0594cbfd # main
       with:
         k8s-version: v1.28.x
         registry-authority: ${{ env.REGISTRY_NAME }}:${{ env.REGISTRY_PORT }}
@@ -65,4 +65,4 @@ jobs:
 
     - name: Collect diagnostics and upload
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@84c993eaf02da1c325854fb272a4df9184bd80fc # main
+      uses: chainguard-dev/actions/kind-diag@29fb6e979a0b3efc79748a17e8cec08d0594cbfd # main

.github/workflows/modules-integration-test.yaml

@@ -11,8 +11,8 @@ jobs:
     strategy:
       matrix:
         go-version:
-          - '1.21'
           - '1.22'
+          - '1.23'
 
     runs-on: 'ubuntu-latest'
     steps:

.github/workflows/release.yml

@@ -29,8 +29,6 @@ jobs:
 
       # This installs the current latest release.
       - uses: ko-build/setup-ko@3aebd0597dc1e9d1a26bcfdb7cbeb19c131d3037 # v0.7
-        with:
-          version: v0.15.2
 
       - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
 

.github/workflows/verify.yaml

@@ -32,4 +32,4 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
         with:
-          version: v1.57
+          version: v1.61

.golangci.yaml

@@ -27,3 +27,9 @@ linters:
   disable:
     - errcheck
     - depguard
+
+linters-settings:
+  gosec:
+    excludes:
+      # TODO: Check those example in pkg/caps/caps.go:131
+      - G115  # Potential integer overflow when converting between integer types

go.mod

@@ -1,6 +1,6 @@
 module github.com/google/ko
 
-go 1.22.3
+go 1.22.7
 
 require (
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240514230400-03fa26f5508f