fix(ci): install chainsaw from pre-built binary instead of go install

Chainsaw v0.2.14 doesn't implement the ModulePath() method added to
testing.testDeps in Go 1.26, causing `go install` to fail. Switch all
chainsaw installations to download pre-built binaries from GitHub
releases, which avoids the compilation incompatibility and is faster.

Author: mchmarny

.github/actions/chainsaw/action.yml

@@ -38,7 +38,19 @@ runs:
 
     - name: Install Chainsaw
       shell: bash
-      run: go install github.com/kyverno/chainsaw@${{ inputs.chainsaw_version }}
+      run: |
+        set -euo pipefail
+        VERSION="${{ inputs.chainsaw_version }}"
+        VERSION="${VERSION#v}"
+        TAR="chainsaw_linux_amd64.tar.gz"
+        URL="https://github.com/kyverno/chainsaw/releases/download/v${VERSION}/${TAR}"
+        TMP="$(mktemp -d)"
+        curl -fsSL -o "${TMP}/${TAR}" "${URL}"
+        tar -xzf "${TMP}/${TAR}" -C "${TMP}"
+        sudo mv "${TMP}/chainsaw" /usr/local/bin/chainsaw
+        sudo chmod +x /usr/local/bin/chainsaw
+        rm -rf "${TMP}"
+        chainsaw version
 
     - name: Build aicr binary
       shell: bash

.github/actions/integration/action.yml

@@ -72,7 +72,18 @@ runs:
     - name: Install Chainsaw
       shell: bash
       run: |
-        go install github.com/kyverno/chainsaw@${{ inputs.chainsaw_version }}
+        set -euo pipefail
+        VERSION="${{ inputs.chainsaw_version }}"
+        VERSION="${VERSION#v}"
+        TAR="chainsaw_linux_amd64.tar.gz"
+        URL="https://github.com/kyverno/chainsaw/releases/download/v${VERSION}/${TAR}"
+        TMP="$(mktemp -d)"
+        curl -fsSL -o "${TMP}/${TAR}" "${URL}"
+        tar -xzf "${TMP}/${TAR}" -C "${TMP}"
+        sudo mv "${TMP}/chainsaw" /usr/local/bin/chainsaw
+        sudo chmod +x /usr/local/bin/chainsaw
+        rm -rf "${TMP}"
+        chainsaw version
 
     - name: Run Integration Tests
       shell: bash

.github/workflows/gpu-h100-inference-test.yaml

@@ -115,8 +115,17 @@ jobs:
 
       - name: Install chainsaw
         run: |
-          CHAINSAW_VERSION=$(yq eval '.testing_tools.chainsaw' .settings.yaml)
-          GOFLAGS= go install "github.com/kyverno/chainsaw@${CHAINSAW_VERSION}"
+          set -euo pipefail
+          VERSION=$(yq eval '.testing_tools.chainsaw' .settings.yaml)
+          VERSION="${VERSION#v}"
+          TAR="chainsaw_linux_amd64.tar.gz"
+          URL="https://github.com/kyverno/chainsaw/releases/download/v${VERSION}/${TAR}"
+          TMP="$(mktemp -d)"
+          curl -fsSL -o "${TMP}/${TAR}" "${URL}"
+          tar -xzf "${TMP}/${TAR}" -C "${TMP}"
+          sudo mv "${TMP}/chainsaw" /usr/local/bin/chainsaw
+          sudo chmod +x /usr/local/bin/chainsaw
+          rm -rf "${TMP}"
           chainsaw version
 
       - name: Run chainsaw health checks

.github/workflows/gpu-h100-training-test.yaml

@@ -96,8 +96,17 @@ jobs:
 
       - name: Install chainsaw
         run: |
-          CHAINSAW_VERSION=$(yq eval '.testing_tools.chainsaw' .settings.yaml)
-          GOFLAGS= go install "github.com/kyverno/chainsaw@${CHAINSAW_VERSION}"
+          set -euo pipefail
+          VERSION=$(yq eval '.testing_tools.chainsaw' .settings.yaml)
+          VERSION="${VERSION#v}"
+          TAR="chainsaw_linux_amd64.tar.gz"
+          URL="https://github.com/kyverno/chainsaw/releases/download/v${VERSION}/${TAR}"
+          TMP="$(mktemp -d)"
+          curl -fsSL -o "${TMP}/${TAR}" "${URL}"
+          tar -xzf "${TMP}/${TAR}" -C "${TMP}"
+          sudo mv "${TMP}/chainsaw" /usr/local/bin/chainsaw
+          sudo chmod +x /usr/local/bin/chainsaw
+          rm -rf "${TMP}"
           chainsaw version
 
       - name: Run chainsaw health checks

tools/setup-tools

@@ -365,11 +365,21 @@ if [[ "${SKIP_TOOLS}" == "false" ]]; then
     else
         log_info "Installing Chainsaw ${CHAINSAW_VERSION}..."
         if prompt_continue; then
-            if command_exists go; then
-                go install github.com/kyverno/chainsaw@"${CHAINSAW_VERSION}"
-            else
-                log_warning "Install chainsaw manually: go install github.com/kyverno/chainsaw@${CHAINSAW_VERSION}"
-            fi
+            local ver="${CHAINSAW_VERSION#v}"
+            local os_name; os_name="$(uname -s | tr '[:upper:]' '[:lower:]')"
+            local arch; arch="$(uname -m)"
+            case "${arch}" in
+                x86_64) arch="amd64" ;;
+                aarch64|arm64) arch="arm64" ;;
+            esac
+            local tar="chainsaw_${os_name}_${arch}.tar.gz"
+            local url="https://github.com/kyverno/chainsaw/releases/download/v${ver}/${tar}"
+            local tmp; tmp="$(mktemp -d)"
+            curl -fsSL -o "${tmp}/${tar}" "${url}"
+            tar -xzf "${tmp}/${tar}" -C "${tmp}"
+            sudo mv "${tmp}/chainsaw" /usr/local/bin/chainsaw
+            sudo chmod +x /usr/local/bin/chainsaw
+            rm -rf "${tmp}"
             log_success "Chainsaw installed"
         fi
     fi