update golangci lint in gh actions

Author: Emyrk

.github/workflows/lint.yaml

@@ -33,4 +33,4 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v6.1.1
         with:
-          version: v1.48.0
+          version: v1.60.0

cli/signature.go

@@ -13,6 +13,7 @@ import (
 func signature() *cobra.Command {
 	cmd := &cobra.Command{
 		Use:     "signature",
+		Short:   "Commands for debugging and working with signatures.",
 		Hidden:  true, // Debugging tools
 		Aliases: []string{"sig", "sigs", "signatures"},
 	}

extensionsign/sigmanifest.go

@@ -13,6 +13,7 @@ import (
 	"github.com/coder/code-marketplace/storage/easyzip"
 )
 
+// SignatureManifest should be serialized to JSON before being signed.
 type SignatureManifest struct {
 	Package File
 	// Entries is base64(filepath) -> File

extensionsign/sigmanifest_test.go

@@ -21,6 +21,7 @@ const (
 	sigManifestName = ".signature.manifest"
 )
 
+// Signature is a storage wrapper that can sign extensions on demand.
 type Signature struct {
 	// Signer if provided, will be used to sign extensions. If not provided,
 	// no extensions will be signed.

storage/signature.go

@@ -0,0 +1,21 @@
+package storage_test
+
+import (
+	"testing"
+
+	"github.com/coder/code-marketplace/extensionsign"
+	"github.com/coder/code-marketplace/storage"
+)
+
+func signed(factory func(t *testing.T) testStorage) func(t *testing.T) testStorage {
+	return func(t *testing.T) testStorage {
+		st := factory(t)
+		key, _ := extensionsign.GenerateKey()
+
+		return testStorage{
+			storage: storage.NewSignatureStorage(key, st.storage),
+			write:   st.write,
+			exists:  st.exists,
+		}
+	}
+}

storage/signature_test.go

@@ -132,6 +132,14 @@ func TestStorage(t *testing.T) {
 			name:    "Artifactory",
 			factory: artifactoryFactory,
 		},
+		//{
+		//	name:    "SignedLocal",
+		//	factory: signed(localFactory),
+		//},
+		//{
+		//	name:    "SignedArtifactory",
+		//	factory: signed(artifactoryFactory),
+		//},
 	}
 	for _, sf := range factories {
 		t.Run(sf.name, func(t *testing.T) {