fix lint errors

I am planning on squashing this later.

Signed-off-by: arewm <arewm@users.noreply.github.com>

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED

Author: arewm

pkg/chains/storage/oci/legacy.go

@@ -359,7 +359,7 @@ func (b *Backend) uploadSignatureWithReferrers(ctx context.Context, format simpl
 }
 
 // uploadAttestationWithReferrers uses cosign's OCI 1.1 experimental API for attestations
-func (b *Backend) uploadAttestationWithReferrers(ctx context.Context, attestation *intoto.Statement, signature string, storageOpts config.StorageOpts, remoteOpts ...remote.Option) error {
+func (b *Backend) uploadAttestationWithReferrers(ctx context.Context, attestation *intoto.Statement, signature string, _ config.StorageOpts, remoteOpts ...remote.Option) error {
 	logger := logging.FromContext(ctx)
 	if len(attestation.Subject) == 0 {
 		return errors.New("no subjects in attestation")

pkg/chains/storage/oci/options.go

@@ -59,6 +59,7 @@ func (o *targetRepoOption) applySimpleStorer(s *SimpleStorer) error {
 }
 
 // WithReferrersAPI configures the storers to use OCI 1.1 referrers API.
+//nolint:ireturn // returning interface is the intended pattern for options
 func WithReferrersAPI(enabled bool) Option {
 	return &referrersAPIOption{
 		enabled: enabled,

pkg/config/config.go

@@ -180,7 +180,7 @@ const (
 	gcsBucketKey               = "storage.gcs.bucket"
 	ociRepositoryKey           = "storage.oci.repository"
 	ociRepositoryInsecureKey   = "storage.oci.repository.insecure"
-	ociReferrersAPIKey         = "storage.oci.referrers-api"
+	ociReferrersAPIKey         = "storage.oci.referrers-api" //nolint:gosec // G101: This is a config key, not hardcoded credentials
 	docDBUrlKey                = "storage.docdb.url"
 	docDBMongoServerURLKey     = "storage.docdb.mongo-server-url"
 	docDBMongoServerURLDirKey  = "storage.docdb.mongo-server-url-dir"