@haydentherapper you added that, do you know the reason for that?

For info, the message that results, on both Go 1.16 and go 1.18:

[root@913ff300c5c8 /]# go install -v github.com/sigstore/cosign/cmd/cosign@latest
go: downloading github.com/sigstore/cosign v1.8.0
go: github.com/sigstore/cosign/cmd/cosign@latest (in github.com/sigstore/[email protected]):
	The go.mod file for the module providing named packages contains one or
	more exclude directives. It must not contain directives that would cause
	it to be interpreted differently than if it were the main module.

(Also, I could not find any information in the PR as to why it was added nor that it was even brought up during reviews.)

This was to avoid pulling in a dependency that declared the same flag names. However I think I fixed it in another way? Tests will need to pass with this removed to confirm that.

@puiterwijk you need to run go mod tidy and after you should run ./hack/update-codegen.sh and then commit the changes

fixed here #1846
closing this one
thanks for your PR!