Known importers: 4 (displaying 6 packages, including internal and invalid packages) github.com/containers/image/v5/signature github.com/in-toto/ (4) github.com/in-toto/go-witness (3) github.com/in-toto/go-witness github.com/in-toto/go-witness/internal/policy github.com/in-toto/go-witness/policy github.com/in-toto/witness/options github.com/slsa-framework/slsa-verifier/v2/verifiers/internal/gha