refactor: cleanup imports

cmd/main.go

@@ -26,6 +26,7 @@ func main() {
 
 	var codeMeasurements, enclaveMeasurements *attestation.Measurement
 
+	log.Printf("Fetching latest release for %s", *repo)
 	latestTag, eifHash, err := github.FetchLatestRelease(*repo)
 	if err != nil {
 		log.Fatalf("Failed to fetch latest release: %v", err)
@@ -34,6 +35,7 @@ func main() {
 	log.Printf("Latest release: %s", latestTag)
 	log.Printf("EIF hash: %s", eifHash)
 
+	log.Printf("Fetching sigstore bundle from %s for EIF %s", *repo, eifHash)
 	bundleBytes, err := github.FetchAttestationBundle(*repo, eifHash)
 	if err != nil {
 		log.Fatal(err)

pkg/attestation/fetch.go

@@ -2,7 +2,6 @@ package attestation
 
 import (
 	"encoding/json"
-	"log"
 	"net/http"
 	"net/url"
 )
@@ -20,7 +19,7 @@ func Fetch(host string) (*Document, error) {
 
 	resp, err := http.Get(u.String())
 	if err != nil {
-		log.Fatal(err)
+		return nil, err
 	}
 	defer resp.Body.Close()
 

pkg/attestation/nitro.go

@@ -3,6 +3,7 @@ package attestation
 import (
 	"encoding/base64"
 	"encoding/hex"
+
 	"github.com/blocky/nitrite"
 )
 

pkg/github/github.go

@@ -3,15 +3,13 @@ package github
 import (
 	"encoding/json"
 	"fmt"
-	"log"
 	"net/http"
 	"regexp"
 )
 
 // FetchLatestRelease gets the latest release and EIF hash of a repo
 func FetchLatestRelease(repo string) (string, string, error) {
 	url := "https://api.github.com/repos/" + repo + "/releases/latest"
-	log.Printf("Fetching latest release for %s", repo)
 	releaseResponse, err := http.Get(url)
 	if err != nil {
 		return "", "", err
@@ -37,7 +35,6 @@ func FetchLatestRelease(repo string) (string, string, error) {
 // FetchAttestationBundle fetches the sigstore bundle from a repo for a given repo and EIF hash
 func FetchAttestationBundle(repo, digest string) ([]byte, error) {
 	url := "https://api.github.com/repos/" + repo + "/attestations/sha256:" + digest
-	log.Printf("Fetching sigstore bundle from %s for EIF %s", repo, digest)
 	bundleResponse, err := http.Get(url)
 	if err != nil {
 		return nil, err

pkg/sigstore/sigstore.go

@@ -3,6 +3,7 @@ package sigstore
 import (
 	"encoding/hex"
 	"fmt"
+
 	protobundle "github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1"
 	"github.com/sigstore/sigstore-go/pkg/bundle"
 	"github.com/sigstore/sigstore-go/pkg/root"