Bump github.com/sigstore/sigstore in the gomod group across 1 directo… #1767

	name: Verify

	on:
	push:
	branches: ["main"]
	pull_request:
	branches: ["main"]

	permissions:
	contents: read

	jobs:
	license-check:
	name: license boilerplate check
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
	with:
	go-version-file: 'go.mod'
	check-latest: true
	- name: Install addlicense
	run: go install github.com/google/[email protected]
	- name: Check license headers
	run: \|
	set -e
	addlicense -l apache -c 'The Sigstore Authors' -v \
	-ignore "*.yml" \
	-ignore "*.yaml" \
	-ignore "internal/fork/**" \
	*
	git diff --exit-code

	golangci:
	name: lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
	with:
	go-version-file: 'go.mod'
	check-latest: true
	- name: golangci-lint
	uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6.1.1
	with:
	version: v1.61
	args: --timeout 10m

	generate-docs:
	name: generate-docs
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
	with:
	go-version-file: 'go.mod'
	check-latest: true
	- name: Check CLI docs are up to date
	run: ./hack/presubmit.sh

Provide feedback