[aaronlew02]

Summary

This change removes signing code that remains unused as signing occurs exclusively via sigstore-go.

Tests are slightly refactored to eliminate reliance on unused signing code.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 37.71%. Comparing base (2ef6022) to head (b0f2c93).
⚠️ Report is 764 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4918      +/-   ##
==========================================
- Coverage   40.10%   37.71%   -2.39%     
==========================================
  Files         155      211      +56     
  Lines       10044    12743    +2699     
==========================================
+ Hits         4028     4806     +778     
- Misses       5530     7237    +1707     
- Partials      486      700     +214     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[steiza]

Amazing! These giant reductions in code we have to maintain is exactly why we started this Cosign modernization effort ~2 years ago.

Unfortunately Go's dead code detection is pretty good, and so the resulting binary is pretty much the same size. 😅 But regardless, having less code to maintain and surface area for LLM-assisted vulnerability discovery is definitely a win.