sort properly Go imports (#4071)

Signed-off-by: Dmitry Savintsev <[email protected]>

Author: dmitris

cmd/cosign/cli/piv_tool.go

@@ -20,10 +20,9 @@ package cli
 import (
 	"encoding/json"
 
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/pivcli"
+	"github.com/spf13/cobra"
 )
 
 var pivToolForce bool

cmd/cosign/cli/pkcs11_tool.go

@@ -18,10 +18,9 @@
 package cli
 
 import (
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/pkcs11cli"
+	"github.com/spf13/cobra"
 )
 
 var pkcs11ToolForce bool

cmd/cosign/cli/public_key.go

@@ -18,11 +18,10 @@ package cli
 import (
 	"os"
 
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/generate"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/publickey"
+	"github.com/spf13/cobra"
 )
 
 func PublicKey() *cobra.Command {

cmd/cosign/cli/sign.go

@@ -19,11 +19,10 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/generate"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/sign"
+	"github.com/spf13/cobra"
 )
 
 func Sign() *cobra.Command {

cmd/cosign/cli/tree.go

@@ -20,13 +20,11 @@ import (
 	"fmt"
 	"os"
 
-	v1 "github.com/google/go-containerregistry/pkg/v1"
-
 	"github.com/google/go-containerregistry/pkg/name"
-	"github.com/spf13/cobra"
-
+	v1 "github.com/google/go-containerregistry/pkg/v1"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	ociremote "github.com/sigstore/cosign/v2/pkg/oci/remote"
+	"github.com/spf13/cobra"
 )
 
 func Tree() *cobra.Command {

cmd/cosign/cli/triangulate.go

@@ -18,10 +18,9 @@ package cli
 import (
 	"flag"
 
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/triangulate"
+	"github.com/spf13/cobra"
 )
 
 func Triangulate() *cobra.Command {

cmd/cosign/cli/trustedroot.go

@@ -18,10 +18,9 @@ package cli
 import (
 	"context"
 
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/trustedroot"
+	"github.com/spf13/cobra"
 )
 
 func TrustedRoot() *cobra.Command {

cmd/cosign/cli/upload.go

@@ -18,10 +18,9 @@ package cli
 import (
 	"flag"
 
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/upload"
+	"github.com/spf13/cobra"
 )
 
 func Upload() *cobra.Command {

cmd/cosign/cli/verify.go

@@ -20,12 +20,10 @@ import (
 	"fmt"
 
 	"github.com/google/go-containerregistry/pkg/name"
-
-	"github.com/spf13/cobra"
-
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/options"
 	"github.com/sigstore/cosign/v2/cmd/cosign/cli/verify"
 	"github.com/sigstore/cosign/v2/internal/ui"
+	"github.com/spf13/cobra"
 )
 
 const ignoreTLogMessage = "Skipping tlog verification is an insecure practice that lacks of transparency and auditability verification for the %s."

pkg/cosign/attestation/attestation.go

@@ -23,10 +23,9 @@ import (
 	"strings"
 	"time"
 
+	"github.com/in-toto/in-toto-golang/in_toto"
 	slsa02 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2"
 	slsa1 "github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1"
-
-	"github.com/in-toto/in-toto-golang/in_toto"
 )
 
 const (