Verify blobs exclusively via sigstore-go

[aaronlew02]

Summary

Release Note

Documentation

[codecov]

Codecov Report

❌ Patch coverage is 55.18672% with 108 lines in your changes missing coverage. Please review.
✅ Project coverage is 40.27%. Comparing base (2ef6022) to head (dc46bfc).
⚠️ Report is 830 commits behind head on main.

Files with missing lines	Patch %	Lines
cmd/cosign/cli/signblob.go	47.82%	12 Missing ⚠️
cmd/cosign/cli/signcommon/common.go	87.09%	11 Missing and 1 partial ⚠️
cmd/cosign/cli/attest.go	0.00%	9 Missing and 1 partial ⚠️
cmd/cosign/cli/sign/sign.go	0.00%	10 Missing ⚠️
cmd/cosign/cli/verify/common.go	61.53%	8 Missing and 2 partials ⚠️
cmd/cosign/cli/sign.go	0.00%	8 Missing and 1 partial ⚠️
cmd/cosign/cli/sign/sign_blob.go	35.71%	7 Missing and 2 partials ⚠️
cmd/cosign/cli/attest_blob.go	0.00%	7 Missing ⚠️
cmd/cosign/cli/attest/attest.go	0.00%	5 Missing ⚠️
cmd/cosign/cli/options/attest.go	0.00%	4 Missing ⚠️
... and 7 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5087      +/-   ##
==========================================
+ Coverage   40.10%   40.27%   +0.16%     
==========================================
  Files         155      207      +52     
  Lines       10044    12895    +2851     
==========================================
+ Hits         4028     5193    +1165     
- Misses       5530     7001    +1471     
- Partials      486      701     +215     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.