/vendor/github.com/sigstore/