[go.mod] Delete unneeded dep

All code that depended on this was deleted in
commit 1eaafcc372e7a51864ed47c29558e798802741c3.

Bug: 333766437
Change-Id: I8d4ab6eb3d09980aee062d6e09498447a6d554e6
Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/infra/+/1025312
Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
Fuchsia-Auto-Submit: Oliver Newman <olivernewman@google.com>
Reviewed-by: Vinicius Felizardo <felizardo@google.com>
diff --git a/go.mod b/go.mod
index 06b18af..7f33587 100644
--- a/go.mod
+++ b/go.mod
@@ -15,7 +15,6 @@
 	github.com/google/go-cmp v0.6.0
 	github.com/google/subcommands v1.2.0
 	github.com/gorhill/cronexpr v0.0.0-20180427100037-88b0669f7d75
-	github.com/in-toto/attestation v1.0.1
 	github.com/maruel/subcommands v1.1.1
 	github.com/pkg/errors v0.9.1
 	github.com/texttheater/golang-levenshtein v1.0.1
diff --git a/go.sum b/go.sum
index 896c10d..36bb089 100644
--- a/go.sum
+++ b/go.sum
@@ -125,8 +125,6 @@
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
 github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
-github.com/in-toto/attestation v1.0.1 h1:DgX1XuBkryTpj1Piq8AiMK3CMfEcec3Qv6+Ku+uI3WY=
-github.com/in-toto/attestation v1.0.1/go.mod h1:hCR5COCuENh5+VfojEkJnt7caOymbEgvyZdKifD6pOw=
 github.com/jcgregorio/logger v0.1.3 h1:KKKWn4Q0bPpGtLFWEF3Pkv0VtX8Oru3cK0OH0ZozYik=
 github.com/jcgregorio/logger v0.1.3/go.mod h1:bluD21Aj6/H3hUey6bnsZsIUf/IzO880aQ5iwBWWEy4=
 github.com/jcgregorio/slog v0.0.0-20190423190439-e6f2d537f900 h1:H8hiPQr5PtkrB5z3Do/9iR5tEwuAFNim68cqcoAlHeY=
diff --git a/vendor/github.com/in-toto/attestation/LICENSE b/vendor/github.com/in-toto/attestation/LICENSE
deleted file mode 100644
index 702a336..0000000
--- a/vendor/github.com/in-toto/attestation/LICENSE
+++ /dev/null
@@ -1,13 +0,0 @@
-Copyright 2021 in-toto Developers
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
diff --git a/vendor/github.com/in-toto/attestation/go/v1/resource_descriptor.go b/vendor/github.com/in-toto/attestation/go/v1/resource_descriptor.go
deleted file mode 100644
index 5ebeea3..0000000
--- a/vendor/github.com/in-toto/attestation/go/v1/resource_descriptor.go
+++ /dev/null
@@ -1,18 +0,0 @@
-/*
-Wrapper APIs for in-toto attestation ResourceDescriptor protos.
-*/
-
-package v1
-
-import "errors"
-
-var ErrRDRequiredField = errors.New("at least one of name, URI, or digest are required")
-
-func (d *ResourceDescriptor) Validate() error {
-	// at least one of name, URI or digest are required
-	if d.GetName() == "" && d.GetUri() == "" && len(d.GetDigest()) == 0 {
-		return ErrRDRequiredField
-	}
-
-	return nil
-}
diff --git a/vendor/github.com/in-toto/attestation/go/v1/resource_descriptor.pb.go b/vendor/github.com/in-toto/attestation/go/v1/resource_descriptor.pb.go
deleted file mode 100644
index f662c8b..0000000
--- a/vendor/github.com/in-toto/attestation/go/v1/resource_descriptor.pb.go
+++ /dev/null
@@ -1,233 +0,0 @@
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.31.0
-// 	protoc        v4.24.4
-// source: in_toto_attestation/v1/resource_descriptor.proto
-
-package v1
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	structpb "google.golang.org/protobuf/types/known/structpb"
-	reflect "reflect"
-	sync "sync"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-// Proto representation of the in-toto v1 ResourceDescriptor.
-// https://github.com/in-toto/attestation/blob/main/spec/v1/resource_descriptor.md
-// Validation of all fields is left to the users of this proto.
-type ResourceDescriptor struct {
-	state         protoimpl.MessageState
-	sizeCache     protoimpl.SizeCache
-	unknownFields protoimpl.UnknownFields
-
-	Name             string            `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
-	Uri              string            `protobuf:"bytes,2,opt,name=uri,proto3" json:"uri,omitempty"`
-	Digest           map[string]string `protobuf:"bytes,3,rep,name=digest,proto3" json:"digest,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
-	Content          []byte            `protobuf:"bytes,4,opt,name=content,proto3" json:"content,omitempty"`
-	DownloadLocation string            `protobuf:"bytes,5,opt,name=download_location,json=downloadLocation,proto3" json:"download_location,omitempty"`
-	MediaType        string            `protobuf:"bytes,6,opt,name=media_type,json=mediaType,proto3" json:"media_type,omitempty"`
-	// Per the Struct protobuf spec, this type corresponds to
-	// a JSON Object, which is truly a map<string, Value> under the hood.
-	// So, the Struct a) is still consistent with our specification for
-	// the `annotations` field, and b) has native support in some language
-	// bindings making their use easier in implementations.
-	// See: https://pkg.go.dev/google.golang.org/protobuf/types/known/structpb#Struct
-	Annotations *structpb.Struct `protobuf:"bytes,7,opt,name=annotations,proto3" json:"annotations,omitempty"`
-}
-
-func (x *ResourceDescriptor) Reset() {
-	*x = ResourceDescriptor{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_in_toto_attestation_v1_resource_descriptor_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
-}
-
-func (x *ResourceDescriptor) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ResourceDescriptor) ProtoMessage() {}
-
-func (x *ResourceDescriptor) ProtoReflect() protoreflect.Message {
-	mi := &file_in_toto_attestation_v1_resource_descriptor_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ResourceDescriptor.ProtoReflect.Descriptor instead.
-func (*ResourceDescriptor) Descriptor() ([]byte, []int) {
-	return file_in_toto_attestation_v1_resource_descriptor_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *ResourceDescriptor) GetName() string {
-	if x != nil {
-		return x.Name
-	}
-	return ""
-}
-
-func (x *ResourceDescriptor) GetUri() string {
-	if x != nil {
-		return x.Uri
-	}
-	return ""
-}
-
-func (x *ResourceDescriptor) GetDigest() map[string]string {
-	if x != nil {
-		return x.Digest
-	}
-	return nil
-}
-
-func (x *ResourceDescriptor) GetContent() []byte {
-	if x != nil {
-		return x.Content
-	}
-	return nil
-}
-
-func (x *ResourceDescriptor) GetDownloadLocation() string {
-	if x != nil {
-		return x.DownloadLocation
-	}
-	return ""
-}
-
-func (x *ResourceDescriptor) GetMediaType() string {
-	if x != nil {
-		return x.MediaType
-	}
-	return ""
-}
-
-func (x *ResourceDescriptor) GetAnnotations() *structpb.Struct {
-	if x != nil {
-		return x.Annotations
-	}
-	return nil
-}
-
-var File_in_toto_attestation_v1_resource_descriptor_proto protoreflect.FileDescriptor
-
-var file_in_toto_attestation_v1_resource_descriptor_proto_rawDesc = []byte{
-	0x0a, 0x30, 0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74, 0x6f, 0x5f, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74,
-	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x76, 0x31, 0x2f, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
-	0x65, 0x5f, 0x64, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x12, 0x16, 0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74, 0x6f, 0x5f, 0x61, 0x74, 0x74, 0x65,
-	0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x1a, 0x1c, 0x67, 0x6f, 0x6f, 0x67,
-	0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x73, 0x74, 0x72, 0x75,
-	0x63, 0x74, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xe6, 0x02, 0x0a, 0x12, 0x52, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x12,
-	0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e,
-	0x61, 0x6d, 0x65, 0x12, 0x10, 0x0a, 0x03, 0x75, 0x72, 0x69, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x03, 0x75, 0x72, 0x69, 0x12, 0x4e, 0x0a, 0x06, 0x64, 0x69, 0x67, 0x65, 0x73, 0x74, 0x18,
-	0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74, 0x6f, 0x5f,
-	0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x2e, 0x52,
-	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f,
-	0x72, 0x2e, 0x44, 0x69, 0x67, 0x65, 0x73, 0x74, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x06, 0x64,
-	0x69, 0x67, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x07, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74,
-	0x18, 0x04, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x07, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x12,
-	0x2b, 0x0a, 0x11, 0x64, 0x6f, 0x77, 0x6e, 0x6c, 0x6f, 0x61, 0x64, 0x5f, 0x6c, 0x6f, 0x63, 0x61,
-	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10, 0x64, 0x6f, 0x77, 0x6e,
-	0x6c, 0x6f, 0x61, 0x64, 0x4c, 0x6f, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x1d, 0x0a, 0x0a,
-	0x6d, 0x65, 0x64, 0x69, 0x61, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x09, 0x6d, 0x65, 0x64, 0x69, 0x61, 0x54, 0x79, 0x70, 0x65, 0x12, 0x39, 0x0a, 0x0b, 0x61,
-	0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x17, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x53, 0x74, 0x72, 0x75, 0x63, 0x74, 0x52, 0x0b, 0x61, 0x6e, 0x6e, 0x6f, 0x74,
-	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x1a, 0x39, 0x0a, 0x0b, 0x44, 0x69, 0x67, 0x65, 0x73, 0x74,
-	0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38,
-	0x01, 0x42, 0x47, 0x0a, 0x1f, 0x69, 0x6f, 0x2e, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x69,
-	0x6e, 0x74, 0x6f, 0x74, 0x6f, 0x2e, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f,
-	0x6e, 0x2e, 0x76, 0x31, 0x5a, 0x24, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d,
-	0x2f, 0x69, 0x6e, 0x2d, 0x74, 0x6f, 0x74, 0x6f, 0x2f, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61,
-	0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x67, 0x6f, 0x2f, 0x76, 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x33,
-}
-
-var (
-	file_in_toto_attestation_v1_resource_descriptor_proto_rawDescOnce sync.Once
-	file_in_toto_attestation_v1_resource_descriptor_proto_rawDescData = file_in_toto_attestation_v1_resource_descriptor_proto_rawDesc
-)
-
-func file_in_toto_attestation_v1_resource_descriptor_proto_rawDescGZIP() []byte {
-	file_in_toto_attestation_v1_resource_descriptor_proto_rawDescOnce.Do(func() {
-		file_in_toto_attestation_v1_resource_descriptor_proto_rawDescData = protoimpl.X.CompressGZIP(file_in_toto_attestation_v1_resource_descriptor_proto_rawDescData)
-	})
-	return file_in_toto_attestation_v1_resource_descriptor_proto_rawDescData
-}
-
-var file_in_toto_attestation_v1_resource_descriptor_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
-var file_in_toto_attestation_v1_resource_descriptor_proto_goTypes = []interface{}{
-	(*ResourceDescriptor)(nil), // 0: in_toto_attestation.v1.ResourceDescriptor
-	nil,                        // 1: in_toto_attestation.v1.ResourceDescriptor.DigestEntry
-	(*structpb.Struct)(nil),    // 2: google.protobuf.Struct
-}
-var file_in_toto_attestation_v1_resource_descriptor_proto_depIdxs = []int32{
-	1, // 0: in_toto_attestation.v1.ResourceDescriptor.digest:type_name -> in_toto_attestation.v1.ResourceDescriptor.DigestEntry
-	2, // 1: in_toto_attestation.v1.ResourceDescriptor.annotations:type_name -> google.protobuf.Struct
-	2, // [2:2] is the sub-list for method output_type
-	2, // [2:2] is the sub-list for method input_type
-	2, // [2:2] is the sub-list for extension type_name
-	2, // [2:2] is the sub-list for extension extendee
-	0, // [0:2] is the sub-list for field type_name
-}
-
-func init() { file_in_toto_attestation_v1_resource_descriptor_proto_init() }
-func file_in_toto_attestation_v1_resource_descriptor_proto_init() {
-	if File_in_toto_attestation_v1_resource_descriptor_proto != nil {
-		return
-	}
-	if !protoimpl.UnsafeEnabled {
-		file_in_toto_attestation_v1_resource_descriptor_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ResourceDescriptor); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: file_in_toto_attestation_v1_resource_descriptor_proto_rawDesc,
-			NumEnums:      0,
-			NumMessages:   2,
-			NumExtensions: 0,
-			NumServices:   0,
-		},
-		GoTypes:           file_in_toto_attestation_v1_resource_descriptor_proto_goTypes,
-		DependencyIndexes: file_in_toto_attestation_v1_resource_descriptor_proto_depIdxs,
-		MessageInfos:      file_in_toto_attestation_v1_resource_descriptor_proto_msgTypes,
-	}.Build()
-	File_in_toto_attestation_v1_resource_descriptor_proto = out.File
-	file_in_toto_attestation_v1_resource_descriptor_proto_rawDesc = nil
-	file_in_toto_attestation_v1_resource_descriptor_proto_goTypes = nil
-	file_in_toto_attestation_v1_resource_descriptor_proto_depIdxs = nil
-}
diff --git a/vendor/github.com/in-toto/attestation/go/v1/statement.go b/vendor/github.com/in-toto/attestation/go/v1/statement.go
deleted file mode 100644
index f63d5f0..0000000
--- a/vendor/github.com/in-toto/attestation/go/v1/statement.go
+++ /dev/null
@@ -1,50 +0,0 @@
-/*
-Wrapper APIs for in-toto attestation Statement layer protos.
-*/
-
-package v1
-
-import "errors"
-
-const StatementTypeUri = "https://in-toto.io/Statement/v1"
-
-var (
-	ErrInvalidStatementType  = errors.New("wrong statement type")
-	ErrSubjectRequired       = errors.New("at least one subject required")
-	ErrDigestRequired        = errors.New("at least one digest required")
-	ErrPredicateTypeRequired = errors.New("predicate type required")
-	ErrPredicateRequired     = errors.New("predicate object required")
-)
-
-func (s *Statement) Validate() error {
-	if s.GetType() != StatementTypeUri {
-		return ErrInvalidStatementType
-	}
-
-	if s.GetSubject() == nil || len(s.GetSubject()) == 0 {
-		return ErrSubjectRequired
-	}
-
-	// check all resource descriptors in the subject
-	subject := s.GetSubject()
-	for _, rd := range subject {
-		if err := rd.Validate(); err != nil {
-			return err
-		}
-
-		// v1 statements require the digest to be set in the subject
-		if len(rd.GetDigest()) == 0 {
-			return ErrDigestRequired
-		}
-	}
-
-	if s.GetPredicateType() == "" {
-		return ErrPredicateTypeRequired
-	}
-
-	if s.GetPredicate() == nil {
-		return ErrPredicateRequired
-	}
-
-	return nil
-}
diff --git a/vendor/github.com/in-toto/attestation/go/v1/statement.pb.go b/vendor/github.com/in-toto/attestation/go/v1/statement.pb.go
deleted file mode 100644
index 8f48858..0000000
--- a/vendor/github.com/in-toto/attestation/go/v1/statement.pb.go
+++ /dev/null
@@ -1,197 +0,0 @@
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.31.0
-// 	protoc        v4.24.4
-// source: in_toto_attestation/v1/statement.proto
-
-package v1
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	structpb "google.golang.org/protobuf/types/known/structpb"
-	reflect "reflect"
-	sync "sync"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-// Proto representation of the in-toto v1 Statement.
-// https://github.com/in-toto/attestation/tree/main/spec/v1
-// Validation of all fields is left to the users of this proto.
-type Statement struct {
-	state         protoimpl.MessageState
-	sizeCache     protoimpl.SizeCache
-	unknownFields protoimpl.UnknownFields
-
-	// Expected to always be "https://in-toto.io/Statement/v1"
-	Type          string                `protobuf:"bytes,1,opt,name=type,json=_type,proto3" json:"type,omitempty"`
-	Subject       []*ResourceDescriptor `protobuf:"bytes,2,rep,name=subject,proto3" json:"subject,omitempty"`
-	PredicateType string                `protobuf:"bytes,3,opt,name=predicate_type,json=predicateType,proto3" json:"predicate_type,omitempty"`
-	Predicate     *structpb.Struct      `protobuf:"bytes,4,opt,name=predicate,proto3" json:"predicate,omitempty"`
-}
-
-func (x *Statement) Reset() {
-	*x = Statement{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_in_toto_attestation_v1_statement_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
-}
-
-func (x *Statement) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*Statement) ProtoMessage() {}
-
-func (x *Statement) ProtoReflect() protoreflect.Message {
-	mi := &file_in_toto_attestation_v1_statement_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use Statement.ProtoReflect.Descriptor instead.
-func (*Statement) Descriptor() ([]byte, []int) {
-	return file_in_toto_attestation_v1_statement_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *Statement) GetType() string {
-	if x != nil {
-		return x.Type
-	}
-	return ""
-}
-
-func (x *Statement) GetSubject() []*ResourceDescriptor {
-	if x != nil {
-		return x.Subject
-	}
-	return nil
-}
-
-func (x *Statement) GetPredicateType() string {
-	if x != nil {
-		return x.PredicateType
-	}
-	return ""
-}
-
-func (x *Statement) GetPredicate() *structpb.Struct {
-	if x != nil {
-		return x.Predicate
-	}
-	return nil
-}
-
-var File_in_toto_attestation_v1_statement_proto protoreflect.FileDescriptor
-
-var file_in_toto_attestation_v1_statement_proto_rawDesc = []byte{
-	0x0a, 0x26, 0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74, 0x6f, 0x5f, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74,
-	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x76, 0x31, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x65, 0x6d, 0x65,
-	0x6e, 0x74, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x16, 0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74,
-	0x6f, 0x5f, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31,
-	0x1a, 0x1c, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
-	0x66, 0x2f, 0x73, 0x74, 0x72, 0x75, 0x63, 0x74, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x30,
-	0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74, 0x6f, 0x5f, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74,
-	0x69, 0x6f, 0x6e, 0x2f, 0x76, 0x31, 0x2f, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f,
-	0x64, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x22, 0xc4, 0x01, 0x0a, 0x09, 0x53, 0x74, 0x61, 0x74, 0x65, 0x6d, 0x65, 0x6e, 0x74, 0x12, 0x13,
-	0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x5f, 0x74,
-	0x79, 0x70, 0x65, 0x12, 0x44, 0x0a, 0x07, 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x02,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x69, 0x6e, 0x5f, 0x74, 0x6f, 0x74, 0x6f, 0x5f, 0x61,
-	0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65,
-	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72,
-	0x52, 0x07, 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x12, 0x25, 0x0a, 0x0e, 0x70, 0x72, 0x65,
-	0x64, 0x69, 0x63, 0x61, 0x74, 0x65, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x0d, 0x70, 0x72, 0x65, 0x64, 0x69, 0x63, 0x61, 0x74, 0x65, 0x54, 0x79, 0x70, 0x65,
-	0x12, 0x35, 0x0a, 0x09, 0x70, 0x72, 0x65, 0x64, 0x69, 0x63, 0x61, 0x74, 0x65, 0x18, 0x04, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x53, 0x74, 0x72, 0x75, 0x63, 0x74, 0x52, 0x09, 0x70, 0x72,
-	0x65, 0x64, 0x69, 0x63, 0x61, 0x74, 0x65, 0x42, 0x47, 0x0a, 0x1f, 0x69, 0x6f, 0x2e, 0x67, 0x69,
-	0x74, 0x68, 0x75, 0x62, 0x2e, 0x69, 0x6e, 0x74, 0x6f, 0x74, 0x6f, 0x2e, 0x61, 0x74, 0x74, 0x65,
-	0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x5a, 0x24, 0x67, 0x69, 0x74, 0x68,
-	0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x69, 0x6e, 0x2d, 0x74, 0x6f, 0x74, 0x6f, 0x2f, 0x61,
-	0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x67, 0x6f, 0x2f, 0x76, 0x31,
-	0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
-}
-
-var (
-	file_in_toto_attestation_v1_statement_proto_rawDescOnce sync.Once
-	file_in_toto_attestation_v1_statement_proto_rawDescData = file_in_toto_attestation_v1_statement_proto_rawDesc
-)
-
-func file_in_toto_attestation_v1_statement_proto_rawDescGZIP() []byte {
-	file_in_toto_attestation_v1_statement_proto_rawDescOnce.Do(func() {
-		file_in_toto_attestation_v1_statement_proto_rawDescData = protoimpl.X.CompressGZIP(file_in_toto_attestation_v1_statement_proto_rawDescData)
-	})
-	return file_in_toto_attestation_v1_statement_proto_rawDescData
-}
-
-var file_in_toto_attestation_v1_statement_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
-var file_in_toto_attestation_v1_statement_proto_goTypes = []interface{}{
-	(*Statement)(nil),          // 0: in_toto_attestation.v1.Statement
-	(*ResourceDescriptor)(nil), // 1: in_toto_attestation.v1.ResourceDescriptor
-	(*structpb.Struct)(nil),    // 2: google.protobuf.Struct
-}
-var file_in_toto_attestation_v1_statement_proto_depIdxs = []int32{
-	1, // 0: in_toto_attestation.v1.Statement.subject:type_name -> in_toto_attestation.v1.ResourceDescriptor
-	2, // 1: in_toto_attestation.v1.Statement.predicate:type_name -> google.protobuf.Struct
-	2, // [2:2] is the sub-list for method output_type
-	2, // [2:2] is the sub-list for method input_type
-	2, // [2:2] is the sub-list for extension type_name
-	2, // [2:2] is the sub-list for extension extendee
-	0, // [0:2] is the sub-list for field type_name
-}
-
-func init() { file_in_toto_attestation_v1_statement_proto_init() }
-func file_in_toto_attestation_v1_statement_proto_init() {
-	if File_in_toto_attestation_v1_statement_proto != nil {
-		return
-	}
-	file_in_toto_attestation_v1_resource_descriptor_proto_init()
-	if !protoimpl.UnsafeEnabled {
-		file_in_toto_attestation_v1_statement_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*Statement); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: file_in_toto_attestation_v1_statement_proto_rawDesc,
-			NumEnums:      0,
-			NumMessages:   1,
-			NumExtensions: 0,
-			NumServices:   0,
-		},
-		GoTypes:           file_in_toto_attestation_v1_statement_proto_goTypes,
-		DependencyIndexes: file_in_toto_attestation_v1_statement_proto_depIdxs,
-		MessageInfos:      file_in_toto_attestation_v1_statement_proto_msgTypes,
-	}.Build()
-	File_in_toto_attestation_v1_statement_proto = out.File
-	file_in_toto_attestation_v1_statement_proto_rawDesc = nil
-	file_in_toto_attestation_v1_statement_proto_goTypes = nil
-	file_in_toto_attestation_v1_statement_proto_depIdxs = nil
-}
diff --git a/vendor/modules.txt b/vendor/modules.txt
index c81259d..6270eb0 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -227,9 +227,6 @@
 # github.com/hashicorp/go-multierror v1.1.1
 ## explicit; go 1.13
 github.com/hashicorp/go-multierror
-# github.com/in-toto/attestation v1.0.1
-## explicit; go 1.20
-github.com/in-toto/attestation/go/v1
 # github.com/jcgregorio/logger v0.1.3
 ## explicit; go 1.18
 github.com/jcgregorio/logger