move signing funcs to rely on external go-apk library

Signed-off-by: Avi Deitcher <[email protected]>

Author: deitch

go.mod

@@ -5,7 +5,7 @@ go 1.20
 require (
 	chainguard.dev/apko v0.7.4-0.20230427160853-4082ea6e082e
 	cloud.google.com/go/storage v1.30.1
-	github.com/chainguard-dev/go-apk v0.0.0-20230430192230-e7b24699f6d3
+	github.com/chainguard-dev/go-apk v0.0.0-20230501082831-d4a4a3b48750
 	github.com/chainguard-dev/yam v0.0.0-20230411155911-ba3a3357c32e
 	github.com/docker/docker v23.0.4+incompatible
 	github.com/dprotaso/go-yit v0.0.0-20220510233725-9ba8df137936

go.sum

@@ -145,8 +145,8 @@ github.com/bwesterb/go-ristretto v1.2.1/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7N
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
-github.com/chainguard-dev/go-apk v0.0.0-20230430192230-e7b24699f6d3 h1:bW2HZoKsgalodBL4NPwr68zqtPyFHQ3PktHmR9TEqko=
-github.com/chainguard-dev/go-apk v0.0.0-20230430192230-e7b24699f6d3/go.mod h1:AAWHP+cZSBRe1AjQbfio64C66XxlOXAS08orCjF0zj8=
+github.com/chainguard-dev/go-apk v0.0.0-20230501082831-d4a4a3b48750 h1:l0s4EA2eGjn1VFK4k7yxZywPCr7yGXkRtxS3jwMWlO4=
+github.com/chainguard-dev/go-apk v0.0.0-20230501082831-d4a4a3b48750/go.mod h1:AAWHP+cZSBRe1AjQbfio64C66XxlOXAS08orCjF0zj8=
 github.com/chainguard-dev/yam v0.0.0-20230411155911-ba3a3357c32e h1:TlpfdSUjQkrq2yh+bySzoOmPKspeaxmOr1fmsNCfNXM=
 github.com/chainguard-dev/yam v0.0.0-20230411155911-ba3a3357c32e/go.mod h1:sfV9rXdvBVe0PDTLWzPh4IpapowZ9CDROjMUN2etRrk=
 github.com/chrismellard/docker-credential-acr-env v0.0.0-20221129204813-6a4d6ed5d396 h1:ZUOndrE3hI7kIqsIAxtMLEmgakCLWodkiBxqoAN1QSQ=

internal/sign/rsa.go

@@ -32,7 +32,7 @@ import (
 	"text/template"
 
 	"chainguard.dev/apko/pkg/log"
-	"chainguard.dev/melange/internal/sign"
+	sign "github.com/chainguard-dev/go-apk/pkg/signature"
 	"github.com/chainguard-dev/go-apk/pkg/tarball"
 	"github.com/psanford/memfs"
 )

internal/sign/sign.go

@@ -17,7 +17,7 @@ package cli
 import (
 	"context"
 
-	"chainguard.dev/melange/internal/sign"
+	sign "github.com/chainguard-dev/go-apk/pkg/signature"
 	"github.com/spf13/cobra"
 )
 

pkg/build/package.go

@@ -23,11 +23,10 @@ import (
 	"sync"
 
 	apko_log "chainguard.dev/apko/pkg/log"
+	sign "github.com/chainguard-dev/go-apk/pkg/signature"
 	"github.com/korovkin/limiter"
 	"github.com/sirupsen/logrus"
 	apkrepo "gitlab.alpinelinux.org/alpine/go/repository"
-
-	"chainguard.dev/melange/internal/sign"
 )
 
 type Context struct {