[aaronlew02]

Summary

This change adds a new --no-signing-config flag, which forces offline signing by initializing an empty signing config.

This change also removes the deprecated --use-signing-config flag. Its functionality when set true (i.e, fetching a signing config from TUF) remains the default. Its functionality when set false is that of --no-signing-config.

Release Note

• Added new --no-signing-config flag to force offline signing by initializing an empty signing config
• Removed deprecated --use-signing-config flag

[codecov]

Codecov Report

❌ Patch coverage is 47.28261% with 97 lines in your changes missing coverage. Please review.
✅ Project coverage is 47.09%. Comparing base (2ef6022) to head (7e0a8c7).
⚠️ Report is 907 commits behind head on main.

Files with missing lines	Patch %	Lines
cmd/cosign/cli/sign/sign.go	0.00%	12 Missing ⚠️
cmd/cosign/cli/attest.go	21.42%	11 Missing ⚠️
cmd/cosign/cli/attest/attest.go	0.00%	10 Missing ⚠️
cmd/cosign/cli/attest_blob.go	50.00%	9 Missing ⚠️
pkg/cosign/verify.go	55.55%	8 Missing ⚠️
cmd/cosign/cli/verify/verify_blob_attestation.go	81.81%	6 Missing ⚠️
cmd/cosign/cli/options/attest_blob.go	0.00%	5 Missing ⚠️
cmd/cosign/cli/signcommon/common.go	28.57%	5 Missing ⚠️
cmd/cosign/cli/verify.go	50.00%	5 Missing ⚠️
cmd/cosign/cli/sign.go	33.33%	4 Missing ⚠️
... and 9 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5163      +/-   ##
==========================================
+ Coverage   40.10%   47.09%   +6.99%     
==========================================
  Files         155      203      +48     
  Lines       10044     9931     -113     
==========================================
+ Hits         4028     4677     +649     
+ Misses       5530     5254     -276     
+ Partials      486        0     -486     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.