lint: unnecessary fmt.sprintf

Signed-off-by: Ramon Petgrave <[email protected]>

Author: ramonpetgrave64

cli/slsa-verifier/main.go

@@ -20,7 +20,7 @@ func check(err error) {
 
 func envWarnings() {
 	if options.TestingEnabled() {
-		slog.Warn(fmt.Sprintf("WARNING: Insecure SLSA_VERIFIER_TESTING is enabled.\n"))
+		slog.Warn("WARNING: Insecure SLSA_VERIFIER_TESTING is enabled.\n")
 	}
 }
 

cli/slsa-verifier/verify/verify_npm_package.go

@@ -55,7 +55,7 @@ func (c *VerifyNpmPackageCommand) Exec(ctx context.Context, tarballs []string) (
 		}
 
 		if c.AttestationsPath == "" {
-			slog.Error(fmt.Sprintf("--attestations-path is required.\n\n"))
+			slog.Error("--attestations-path is required.\n\n")
 			return nil, err
 		}
 		provenanceOpts := &options.ProvenanceOpts{

verifiers/internal/gha/provenance.go

@@ -222,7 +222,7 @@ func VerifyProvenanceSignature(ctx context.Context, trustedRoot *TrustedRoot,
 	}
 
 	// Fallback on using the redis search index to get matching UUIDs.
-	slog.Warn(fmt.Sprintf("No certificate provided, trying Redis search index to find entries by subject digest\n"))
+	slog.Warn("No certificate provided, trying Redis search index to find entries by subject digest\n")
 
 	// Verify the provenance and return the signing certificate.
 	return SearchValidSignedAttestation(ctx, artifactHash,