Repository: deislabs/ratify
Pull request #794 (2023-04-24 06:03:13)

chore: Bump github.com/notaryproject/notation-go from 1.0.0-rc.3 to 1.0.0-rc.4
Bumps [github.com/notaryproject/notation-go](https://github.com/notaryproject/notation-go) from 1.0.0-rc.3 to 1.0.0-rc.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/notaryproject/notation-go/releases">github.com/notaryproject/notation-go's releases</a>.</em></p>
<blockquote>
<h2>v1.0.0-rc.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Added CODEOWNERS and MAINTAINERS files by <a href="https://github.com/toddysm"><code>@​toddysm</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/272">notaryproject/notation-go#272</a></li>
<li>fix: fix the CODEOWNERS format issue by <a href="https://github.com/yizha1"><code>@​yizha1</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/280">notaryproject/notation-go#280</a></li>
<li>update: improve missing trustpolicy error message by <a href="https://github.com/kody-kimberl"><code>@​kody-kimberl</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/282">notaryproject/notation-go#282</a></li>
<li>fix: don't add user-metadata to manifest's subject annotations by <a href="https://github.com/priteshbandi"><code>@​priteshbandi</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/290">notaryproject/notation-go#290</a></li>
<li>build(deps): bump oras.land/oras-go/v2 from 2.0.0 to 2.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/291">notaryproject/notation-go#291</a></li>
<li>build(deps): bump golang.org/x/mod from 0.8.0 to 0.9.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/283">notaryproject/notation-go#283</a></li>
<li>chore: update err msg for policy verification by <a href="https://github.com/qweeah"><code>@​qweeah</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/294">notaryproject/notation-go#294</a></li>
<li>chore: updated to go 1.19 by <a href="https://github.com/patrickzheng200"><code>@​patrickzheng200</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/297">notaryproject/notation-go#297</a></li>
<li>build(deps): bump golang.org/x/mod from 0.9.0 to 0.10.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/299">notaryproject/notation-go#299</a></li>
<li>feat: add local sign/verification for OCI layout directory by <a href="https://github.com/patrickzheng200"><code>@​patrickzheng200</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/288">notaryproject/notation-go#288</a></li>
<li>fix: added truststore.ValidateCerts by <a href="https://github.com/patrickzheng200"><code>@​patrickzheng200</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/285">notaryproject/notation-go#285</a></li>
<li>feat: adding OCSP revocation checks to Verify by <a href="https://github.com/kody-kimberl"><code>@​kody-kimberl</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/295">notaryproject/notation-go#295</a></li>
<li>chore: Updating notation-core-go dependency to rc.3 by <a href="https://github.com/priteshbandi"><code>@​priteshbandi</code></a> in <a href="https://redirect.github.com/notaryproject/notation-go/pull/302">notaryproject/notation-go#302</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/toddysm"><code>@​toddysm</code></a> made their first contribution in <a href="https://redirect.github.com/notaryproject/notation-go/pull/272">notaryproject/notation-go#272</a></li>
<li><a href="https://github.com/kody-kimberl"><code>@​kody-kimberl</code></a> made their first contribution in <a href="https://redirect.github.com/notaryproject/notation-go/pull/282">notaryproject/notation-go#282</a></li>
<li><a href="https://github.com/qweeah"><code>@​qweeah</code></a> made their first contribution in <a href="https://redirect.github.com/notaryproject/notation-go/pull/294">notaryproject/notation-go#294</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/notaryproject/notation-go/compare/v1.0.0-rc.2...v1.0.0-rc.4">https://github.com/notaryproject/notation-go/compare/v1.0.0-rc.2...v1.0.0-rc.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/notaryproject/notation-go/commit/06d04cc0b254e15785b067818167ff9a95989b47"><code>06d04cc</code></a> chore: Updating notation-core-go dependency to rc.3 (<a href="https://redirect.github.com/notaryproject/notation-go/issues/302">#302</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/3dd11cbc7e473abc3b1dfd83f48acd4e56a86ec8"><code>3dd11cb</code></a> feat: adding OCSP revocation checks to Verify (<a href="https://redirect.github.com/notaryproject/notation-go/issues/295">#295</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/67a477f0c6d0054cb54f3062fe62a76de6882a63"><code>67a477f</code></a> fix: added truststore.ValidateCerts (<a href="https://redirect.github.com/notaryproject/notation-go/issues/285">#285</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/cd1a135381c35522ae4c4d791a9b58688d406d11"><code>cd1a135</code></a> feat: add local sign/verification for OCI layout directory (<a href="https://redirect.github.com/notaryproject/notation-go/issues/288">#288</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/5cf34ace712920f8455857a5d7397ba49f4c00b1"><code>5cf34ac</code></a> build(deps): bump golang.org/x/mod from 0.9.0 to 0.10.0 (<a href="https://redirect.github.com/notaryproject/notation-go/issues/299">#299</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/dfb41c5a7cedab87246e2c666f60ea819db1a6b5"><code>dfb41c5</code></a> chore: updated to go 1.19 (<a href="https://redirect.github.com/notaryproject/notation-go/issues/297">#297</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/753b6b12cb2ebba56df6bfdc5b75748ad9e0a5bd"><code>753b6b1</code></a> chore: update err msg for policy verification (<a href="https://redirect.github.com/notaryproject/notation-go/issues/294">#294</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/fb79e6df1aa8cacc8c9f4e917e36ec6dc0403f37"><code>fb79e6d</code></a> build(deps): bump golang.org/x/mod from 0.8.0 to 0.9.0 (<a href="https://redirect.github.com/notaryproject/notation-go/issues/283">#283</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/7301607dce84e5ae5077aaaaf0acaf455fb2a014"><code>7301607</code></a> build(deps): bump oras.land/oras-go/v2 from 2.0.0 to 2.0.2 (<a href="https://redirect.github.com/notaryproject/notation-go/issues/291">#291</a>)</li>
<li><a href="https://github.com/notaryproject/notation-go/commit/1200ba5fb4f7223e9b478e9e66b02185987e7ad6"><code>1200ba5</code></a> fix: don't add user-metadata to manifest's subject annotations (<a href="https://redirect.github.com/notaryproject/notation-go/issues/290">#290</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/notaryproject/notation-go/compare/v1.0.0-rc.3...v1.0.0-rc.4">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/notaryproject/notation-go&package-manager=go_modules&previous-version=1.0.0-rc.3&new-version=1.0.0-rc.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

akashsinghal: @binbin-li could you take a look at this one when you have the chance? There was a breaking change in options naming so I had to manually push a fix.
binbin-li: > @binbin-li could you take a look at this one when you have the chance? There was a breaking change in options naming so I had to manually push a fix.

synced offline, notation rc.4 supports cert revocation. We'll need to check how performance gets impacted after this PR merged.

Patch:
diff --git a/go.mod b/go.mod
index 13238d7..8b8b5c6 100644
--- a/go.mod
+++ b/go.mod
@@ -22,8 +22,8 @@ require (
 	github.com/golang/protobuf v1.5.3
 	github.com/google/go-containerregistry v0.12.1
 	github.com/gorilla/mux v1.8.0
-	github.com/notaryproject/notation-core-go v1.0.0-rc.2
-	github.com/notaryproject/notation-go v1.0.0-rc.3
+	github.com/notaryproject/notation-core-go v1.0.0-rc.3
+	github.com/notaryproject/notation-go v1.0.0-rc.4
 	github.com/open-policy-agent/frameworks/constraint v0.0.0-20220627162905-95c012350402
 	github.com/opencontainers/go-digest v1.0.0
 	github.com/opencontainers/image-spec v1.1.0-rc2
@@ -261,16 +261,16 @@ require (
 	go.uber.org/atomic v1.10.0 // indirect
 	go.uber.org/multierr v1.8.0 // indirect
 	go.uber.org/zap v1.23.0 // indirect
-	golang.org/x/crypto v0.6.0 // indirect
+	golang.org/x/crypto v0.7.0 // indirect
 	golang.org/x/exp v0.0.0-20220823124025-807a23277127 // indirect
-	golang.org/x/mod v0.8.0 // indirect
-	golang.org/x/net v0.7.0 // indirect
+	golang.org/x/mod v0.10.0 // indirect
+	golang.org/x/net v0.8.0 // indirect
 	golang.org/x/oauth2 v0.2.0 // indirect
 	golang.org/x/sys v0.6.0 // indirect
-	golang.org/x/term v0.5.0 // indirect
-	golang.org/x/text v0.7.0 // indirect
+	golang.org/x/term v0.6.0 // indirect
+	golang.org/x/text v0.8.0 // indirect
 	golang.org/x/time v0.2.0 // indirect
-	golang.org/x/tools v0.1.12 // indirect
+	golang.org/x/tools v0.6.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.2.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/genproto v0.0.0-20221111202108-142d8a6fa32e // indirect
diff --git a/go.sum b/go.sum
index b6b0aaf..a98f52e 100644
--- a/go.sum
+++ b/go.sum
@@ -873,10 +873,10 @@ github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
 github.com/nightlyone/lockfile v1.0.0/go.mod h1:rywoIealpdNse2r832aiD9jRk8ErCatROs6LzC841CI=
 github.com/nishanths/predeclared v0.0.0-20200524104333-86fad755b4d3/go.mod h1:nt3d53pc1VYcphSCIaYAJtnPYnr3Zyn8fMq2wvPGPso=
-github.com/notaryproject/notation-core-go v1.0.0-rc.2 h1:nNJuXa12jVNSSETjGNJEcZgv1NwY5ToYPo+c0P9syCI=
-github.com/notaryproject/notation-core-go v1.0.0-rc.2/go.mod h1:ASoc9KbJkSHLbKhO96lb0pIEWJRMZq9oprwBSZ0EAx0=
-github.com/notaryproject/notation-go v1.0.0-rc.3 h1:J93pnI42xw6UzeeCn8a5r3j1n8n5nHjnM3GwrsHzjkQ=
-github.com/notaryproject/notation-go v1.0.0-rc.3/go.mod h1:IlP9GVzPUavxljgJIWoHY0GY1unlqfee7tIiCbSem1w=
+github.com/notaryproject/notation-core-go v1.0.0-rc.3 h1:ukRBOwctPF0bWLFs+ThDHwgj+L3+AHdyaOqmziLp8w0=
+github.com/notaryproject/notation-core-go v1.0.0-rc.3/go.mod h1:XWAlhOksW+c9AA/TyobkPv5Xoz8RWGwOAoDdybZLEiI=
+github.com/notaryproject/notation-go v1.0.0-rc.4 h1:thTDY0wD6YS4EJeHt9kF0bZF9Z9Vin0tidalhJt1Q9o=
+github.com/notaryproject/notation-go v1.0.0-rc.4/go.mod h1:UEEAyBOSlx2yDDiMoofBz635ewcL/KU48AX1WDd5Les=
 github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A=
 github.com/nxadm/tail v1.4.8 h1:nPr65rt6Y5JFSKQO7qToXr7pePgD6Gwiw05lkbyAQTE=
 github.com/nxadm/tail v1.4.8/go.mod h1:+ncqLTQzXmGhMZNUePPaPqPvBxHAIsmXswZKocGu+AU=
@@ -1291,8 +1291,9 @@ golang.org/x/crypto v0.0.0-20220214200702-86341886e292/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.0.0-20220411220226-7b82a4e95df4/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.6.0 h1:qfktjS5LUO+fFKeJXZ+ikTRijMmljikvG68fpMMruSc=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
+golang.org/x/crypto v0.7.0 h1:AvwMYaRytfdeVt3u6mLaxYtErKYjxA2OXjJ1HHq6t3A=
+golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -1333,8 +1334,8 @@ golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.5.0/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro=
 golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3/go.mod h1:3p9vT2HGsQu2K1YbXdKPJLVgG5VJdoTa1poYQBtP1AY=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.8.0 h1:LUYupSeNrTNCGzR/hVBk2NHZO4hXcVaW1k4Qx7rjPx8=
-golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/mod v0.10.0 h1:lFO9qtOdlre5W1jxS3r/4szv2/6iXxScdzjoBMXNhYk=
+golang.org/x/mod v0.10.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -1401,8 +1402,8 @@ golang.org/x/net v0.0.0-20220624214902-1bab6f366d9e/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.0.0-20220826154423-83b083e8dc8b/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.7.0 h1:rJrUqqhjsgNp7KqAIc25s9pZnjU7TUcSY7HcVZjdn1g=
-golang.org/x/net v0.7.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.8.0 h1:Zrh2ngAOFYneWTAIAPethzeaQLuHwhuBkuV6ZiRnUaQ=
+golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1553,8 +1554,9 @@ golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXR
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.5.0 h1:n2a8QNdAb0sZNpU9R1ALUXBbY+w51fCQDN+7EdxNBsY=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.6.0 h1:clScbb1cHjoCkyRbWwBEUZ5H/tIFu5TAXIqaZD0Gcjw=
+golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -1564,8 +1566,9 @@ golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/text v0.7.0 h1:4BRB4x83lYWy72KwLD/qYDuTu7q9PjSagHvijDw7cLo=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.8.0 h1:57P1ETyNKtuIjB4SRd15iJxuhj8Gc416Y78H3qgMh68=
+golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -1649,8 +1652,9 @@ golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.10-0.20220218145154-897bd77cd717/go.mod h1:Uh6Zz+xoGYZom868N8YTex3t7RhtHDBrE8Gzo9bV56E=
 golang.org/x/tools v0.1.10/go.mod h1:Uh6Zz+xoGYZom868N8YTex3t7RhtHDBrE8Gzo9bV56E=
-golang.org/x/tools v0.1.12 h1:VveCTK38A2rkS8ZqFY25HIDFscX5X9OoEhJd3quQmXU=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
+golang.org/x/tools v0.6.0 h1:BOw41kyTf3PuCW1pVQf8+Cyg8pMlkYB1oo9iJ6D/lKM=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
diff --git a/pkg/verifier/notaryv2/notaryv2.go b/pkg/verifier/notaryv2/notaryv2.go
index a15dbb1..bc825c7 100644
--- a/pkg/verifier/notaryv2/notaryv2.go
+++ b/pkg/verifier/notaryv2/notaryv2.go
@@ -158,7 +158,7 @@ func getVerifierService(conf *NotaryV2VerifierConfig) (notation.Verifier, error)
 }
 
 func (v *notaryV2Verifier) verifySignature(ctx context.Context, subjectRef, mediaType string, subjectDesc oci.Descriptor, refBlob []byte) (*notation.VerificationOutcome, error) {
-	opts := notation.VerifyOptions{
+	opts := notation.VerifierVerifyOptions{
 		SignatureMediaType: mediaType,
 		ArtifactReference:  subjectRef,
 	}


Test patch:
diff --git a/pkg/verifier/notaryv2/notaryv2_test.go b/pkg/verifier/notaryv2/notaryv2_test.go
index 6a90a3c..db8f16a 100644
--- a/pkg/verifier/notaryv2/notaryv2_test.go
+++ b/pkg/verifier/notaryv2/notaryv2_test.go
@@ -88,7 +88,7 @@ var (
 
 type mockNotaryVerifier struct{}
 
-func (v mockNotaryVerifier) Verify(ctx context.Context, desc ocispec.Descriptor, signature []byte, opts notation.VerifyOptions) (*notation.VerificationOutcome, error) {
+func (v mockNotaryVerifier) Verify(ctx context.Context, desc ocispec.Descriptor, signature []byte, opts notation.VerifierVerifyOptions) (*notation.VerificationOutcome, error) {
 	if reflect.DeepEqual(signature, testRefBlob2) {
 		return nil, fmt.Errorf("failed verification")
 	}