feat: [draft] add experimental npm sigstore-tuf suport · ramonpetgrave64/slsa-verifier@2b8ab36

Run set -euo pipefail: verifiers/internal/gha/npm.go#L39

don't use `init` function (gochecknoinits)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf.go#L82

ifElseChain: rewrite if-else to switch statement (gocritic)

Run set -euo pipefail: verifiers/internal/gha/npm.go#L38

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf.go#L20

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf.go#L42

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf_test.go#L18

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf_test.go#L24

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf_test.go#L33

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf_test.go#L56

Comment should end in a period (godot)

Run set -euo pipefail: verifiers/internal/gha/npm_sigstore_tuf_test.go#L48

`existant` is a misspelling of `existent` (misspell)

Provide feedback