Go update to 1.26.3

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v9
         with:
-          version: v2.8.0
+          version: v2.12.2
           args: --verbose --timeout=15m
 
   unit-test:

.github/workflows/e2e.yml

@@ -20,6 +20,7 @@ env:
   OPERATOR_REPO: securesign/secure-sign-operator
   OPERATOR_REF: ${{ inputs.operator_ref || 'main' }}
   TEST_NAMESPACE: test
+  CLI_CGW_VERSION: "1.4.2"
 
 jobs:
   e2e:
@@ -99,7 +100,7 @@ jobs:
 
       - name: Add service hosts
         run: |
-          echo "127.0.0.1 fulcio-server.local tuf.local rekor-server.local keycloak-internal.keycloak-system.svc rekor-search-ui.local cli-server.local tsa-server.local" \
+          echo "127.0.0.1 fulcio-server.local tuf.local rekor-server.local keycloak-internal.keycloak-system.svc rekor-search-ui.local tsa-server.local" \
             | sudo tee -a /etc/hosts
 
       - name: Install SecureSign
@@ -123,8 +124,8 @@ jobs:
         working-directory: e2e
         env:
           OIDC_ISSUER_URL: "http://${{ steps.kind.outputs.oidc_host }}/realms/trusted-artifact-signer"
-          CLI_STRATEGY: cli_server
-          CLI_SERVER_URL: "http://cli-server.local"
+          CLI_STRATEGY: cgw
+          CGW_URL: "https://developers.redhat.com/content-gateway/file/RHTAS/${{ env.CLI_CGW_VERSION }}"
         run: |
           REKOR_UI_URL=$(kubectl get rekor -o jsonpath='{.items[0].status.rekorSearchUIUrl}' -n ${{ env.TEST_NAMESPACE }})
           export REKOR_UI_URL

.golangci.yml

@@ -5,7 +5,7 @@ linters:
   enable:
     - copyloopvar
     - errcheck
-    - goconst
+    # - goconst  # disabled: too many false positives on short strings like "version" and "testcli"
     - gocyclo
     - gosec
     - govet

go.mod

@@ -1,6 +1,6 @@
 module github.com/securesign/sigstore-e2e
 
-go 1.24
+go 1.26.3
 
 replace github.com/go-jose/go-jose/v3 => github.com/go-jose/go-jose/v4 v4.0.5