fix: fix the Go package version to v2

[suzuki-shunsuke]

Fix the package name github.com/slsa-framework/slsa-verifier to github.com/slsa-framework/slsa-verifier/v2.

git ls-files | grep ".go$" | xargs -n 1 gsed -i "s|github.com/slsa-framework/slsa-verifier|github.com/slsa-framework/slsa-verifier/v2|g"

slsa-verifier v2 has been released. https://github.com/slsa-framework/slsa-verifier/releases/tag/v2.0.0

Currently, we can't install slsa-verifier v2 by go install.

1. Failed to install v2.

$ go install github.com/slsa-framework/slsa-verifier/cli/slsa-verifier@v2.0.0
go: github.com/slsa-framework/slsa-verifier/cli/slsa-verifier@v2.0.0: github.com/slsa-framework/slsa-verifier@v2.0.0: invalid version: module contains a go.mod file, so module path must match major version ("github.com/slsa-framework/slsa-verifier/v2")

2. Installed not v2 but v1.4.1.

$ go install github.com/slsa-framework/slsa-verifier/cli/slsa-verifier@latest
go: downloading github.com/slsa-framework/slsa-verifier v1.4.1
go: downloading github.com/sigstore/cosign v1.12.0
go: downloading github.com/google/trillian v1.4.2
go: downloading github.com/sigstore/rekor v0.11.0
go: downloading github.com/sigstore/sigstore v1.4.2
go: downloading golang.org/x/crypto v0.0.0-20220919173607-35f4265a4bc0
go: downloading github.com/theupdateframework/go-tuf v0.5.1-0.20220920170306-f237d7ca5b42
go: downloading golang.org/x/term v0.0.0-20220526004731-065cf7ba2467
go: downloading github.com/letsencrypt/boulder v0.0.0-20220723181115-27de4befb95e
go: downloading golang.org/x/oauth2 v0.0.0-20220822191816-0ebed06d0094
go: downloading google.golang.org/genproto v0.0.0-20220805133916-01dd62135a58
go: downloading github.com/klauspost/compress v1.15.9
go: downloading github.com/aws/aws-sdk-go-v2/config v1.17.7
go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.20
go: downloading golang.org/x/time v0.0.0-20220722155302-e5dcc9cfc0b9
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.12.20
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.13.5

[suzuki-shunsuke]

https://github.com/slsa-framework/slsa-verifier/actions/runs/3597819895/jobs/6059973163

=== RUN   Test_runVerifyGHAArtifactPath/regression:_sharded_uuids
No certificate provided, trying Redis search index to find entries by subject digest
Verified signature against tlog entry index 2907428 at URL: https://rekor.sigstore.dev/api/v1/log/entries/362f8ecba72f432624befa6acb7f1263c026e7b135e24cf23f11b5020a5fb9365e922a831485bb60
    main_test.go:557: :   any(
        - 	e"source used to generate the binary does not match provenance: expected source 'slsa-framework/slsa-verifier/v2', got 'slsa-framework/slsa-verifier'",
          )
--- FAIL: Test_runVerifyGHAArtifactPath (291.30s)

[suzuki-shunsuke]

#373 (comment) has been solved. 4387593

[laurentsimon]

Thanks!