gofmt100%

Gofmt formats Go programs. We run gofmt -s on your code, where -s is for the "simplify" command

No problems detected. Good job!

go_vet100%

go vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string.

No problems detected. Good job!

ineffassign100%

IneffAssign detects ineffectual assignments in Go code.

No problems detected. Good job!

gocyclo86%

Gocyclo calculates cyclomatic complexities of functions in Go source code. The cyclomatic complexity of a function is calculated according to the following rules: 1 is the base complexity of a function +1 for each 'if', 'for', 'case', '&&' or '||' Go Report Card warns on functions with cyclomatic complexity > 15.

• cmd/cosign/cli/verify/verify.go
  • Line 78: warning: cyclomatic complexity 33 of function (*VerifyCommand).Exec() is high (> 15) (gocyclo)
  • Line 256: warning: cyclomatic complexity 28 of function PrintVerification() is high (> 15) (gocyclo)

• pkg/cosign/git/github/github.go
  • Line 46: warning: cyclomatic complexity 20 of function (*Gh).PutSecret() is high (> 15) (gocyclo)

• cmd/cosign/cli/options/attach.go
  • Line 73: warning: cyclomatic complexity 17 of function (*AttachSBOMOptions).MediaType() is high (> 15) (gocyclo)

• pkg/cosign/verify.go
  • Line 771: warning: cyclomatic complexity 25 of function verifyImageAttestations() is high (> 15) (gocyclo)
  • Line 592: warning: cyclomatic complexity 19 of function VerifyImageSignature() is high (> 15) (gocyclo)
  • Line 222: warning: cyclomatic complexity 19 of function CheckCertificatePolicy() is high (> 15) (gocyclo)

• cmd/cosign/cli/policy_init.go
  • Line 162: warning: cyclomatic complexity 22 of function signPolicy() is high (> 15) (gocyclo)

• pkg/cosign/remote/remote.go
  • Line 52: warning: cyclomatic complexity 20 of function (*dd).Find() is high (> 15) (gocyclo)

• pkg/oci/mutate/map.go
  • Line 47: warning: cyclomatic complexity 18 of function Map() is high (> 15) (gocyclo)

• cmd/cosign/cli/verify/verify_attestation.go
  • Line 69: warning: cyclomatic complexity 43 of function (*VerifyAttestationCommand).Exec() is high (> 15) (gocyclo)

• pkg/oci/signature/layer_test.go
  • Line 40: warning: cyclomatic complexity 31 of function TestSignature() is high (> 15) (gocyclo)

• pkg/cosign/pkcs11key/pkcs11key.go
  • Line 54: warning: cyclomatic complexity 31 of function GetKeyWithURIConfig() is high (> 15) (gocyclo)

• cmd/cosign/cli/pkcs11cli/commands.go
  • Line 82: warning: cyclomatic complexity 28 of function GetKeysInfo() is high (> 15) (gocyclo)

• pkg/sget/sget.go
  • Line 51: warning: cyclomatic complexity 17 of function (*SecureGet).Do() is high (> 15) (gocyclo)

• pkg/oci/remote/index_test.go
  • Line 31: warning: cyclomatic complexity 20 of function TestSignedImageIndex() is high (> 15) (gocyclo)

• cmd/cosign/cli/generate/generate_key_pair.go
  • Line 45: warning: cyclomatic complexity 17 of function GenerateKeyPairCmd() is high (> 15) (gocyclo)

• pkg/oci/mutate/mutate_test.go
  • Line 153: warning: cyclomatic complexity 60 of function TestSignEntity() is high (> 15) (gocyclo)
  • Line 33: warning: cyclomatic complexity 26 of function TestAppendManifests() is high (> 15) (gocyclo)

• pkg/oci/internal/signature/layer_test.go
  • Line 40: warning: cyclomatic complexity 31 of function TestSignature() is high (> 15) (gocyclo)

• cmd/cosign/cli/verify/verify_blob_test.go
  • Line 695: warning: cyclomatic complexity 28 of function TestVerifyBlobCmdWithBundle() is high (> 15) (gocyclo)

• cmd/cosign/cli/fulcio/fulcioverifier/ctl/verify.go
  • Line 71: warning: cyclomatic complexity 27 of function VerifySCT() is high (> 15) (gocyclo)

• cmd/cosign/cli/attest/attest_blob.go
  • Line 57: warning: cyclomatic complexity 16 of function (*AttestBlobCommand).Exec() is high (> 15) (gocyclo)

• cmd/cosign/cli/verify/verify_blob.go
  • Line 69: warning: cyclomatic complexity 47 of function VerifyBlobCmd() is high (> 15) (gocyclo)
  • Line 291: warning: cyclomatic complexity 19 of function verifyBlob() is high (> 15) (gocyclo)
  • Line 511: warning: cyclomatic complexity 17 of function verifyBundleMatchesData() is high (> 15) (gocyclo)

• pkg/policy/attestation.go
  • Line 40: warning: cyclomatic complexity 26 of function AttestationToPayloadJSON() is high (> 15) (gocyclo)

• cmd/cosign/cli/tree.go
  • Line 50: warning: cyclomatic complexity 22 of function TreeCmd() is high (> 15) (gocyclo)

• cmd/cosign/cli/fulcio/fulcio.go
  • Line 119: warning: cyclomatic complexity 16 of function NewSigner() is high (> 15) (gocyclo)

• pkg/oci/mutate/map_test.go
  • Line 95: warning: cyclomatic complexity 37 of function TestMapImageIndex() is high (> 15) (gocyclo)

• cmd/cosign/cli/sign/sign.go
  • Line 346: warning: cyclomatic complexity 26 of function signerFromKeyRef() is high (> 15) (gocyclo)
  • Line 126: warning: cyclomatic complexity 21 of function SignCmd() is high (> 15) (gocyclo)
  • Line 219: warning: cyclomatic complexity 19 of function signDigest() is high (> 15) (gocyclo)

• cmd/cosign/cli/sign/sign_blob.go
  • Line 37: warning: cyclomatic complexity 21 of function SignBlobCmd() is high (> 15) (gocyclo)

• cmd/cosign/cli/env.go
  • Line 61: warning: cyclomatic complexity 16 of function printEnv() is high (> 15) (gocyclo)

• pkg/oci/mutate/signature_test.go
  • Line 83: warning: cyclomatic complexity 38 of function assertSignaturesEqual() is high (> 15) (gocyclo)

• test/pkcs11_test.go
  • Line 153: warning: cyclomatic complexity 18 of function TestListKeysUrisCmd() is high (> 15) (gocyclo)

• pkg/oci/signed/index_test.go
  • Line 28: warning: cyclomatic complexity 18 of function TestImageIndex() is high (> 15) (gocyclo)

• cmd/cosign/cli/attest/attest.go
  • Line 69: warning: cyclomatic complexity 23 of function AttestCmd() is high (> 15) (gocyclo)

• pkg/cosign/certextensions_test.go
  • Line 111: warning: cyclomatic complexity 21 of function TestUnmarshalOtherNameSANFailures() is high (> 15) (gocyclo)

• pkg/cosign/keys.go
  • Line 77: warning: cyclomatic complexity 17 of function ImportKeyPair() is high (> 15) (gocyclo)

• pkg/oci/static/signature_test.go
  • Line 185: warning: cyclomatic complexity 35 of function TestNewAttestationBasic() is high (> 15) (gocyclo)
  • Line 30: warning: cyclomatic complexity 35 of function TestNewSignatureBasic() is high (> 15) (gocyclo)

• pkg/oci/static/file_test.go
  • Line 28: warning: cyclomatic complexity 25 of function TestNewFile() is high (> 15) (gocyclo)

• cmd/cosign/cli/download/sbom.go
  • Line 46: warning: cyclomatic complexity 21 of function SBOMCmd() is high (> 15) (gocyclo)

• pkg/cosign/git/gitlab/gitlab.go
  • Line 39: warning: cyclomatic complexity 16 of function (*Gl).PutSecret() is high (> 15) (gocyclo)

license100%

Checks whether your project has a LICENSE file.

No problems detected. Good job!

misspell99%

Misspell Finds commonly misspelled English words

• cmd/cosign/cli/verify/verify_blob.go
  • Line 255: warning: "succesful" is a misspelling of "successful" (misspell)

• test/pkcs11_test.go
  • Line 26: warning: "overriden" is a misspelling of "overridden" (misspell)
  • Line 34: warning: "overriden" is a misspelling of "overridden" (misspell)