Add explicit setup-go action for workflows and change attestation fil…

…e output to backwards compatible

Signed-off-by: John Kjell <john@testifysec.com>

.github/workflows/codeql.yml

@@ -48,6 +48,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
+      - name: Setup Go
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version: 1.21.x
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
         uses: github/codeql-action/init@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2

.github/workflows/golangci-lint.yml

@@ -16,6 +16,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version: 1.21.x
       - name: golangci-lint
         uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
         with:

cmd/run.go

@@ -139,9 +139,8 @@ func runRun(ctx context.Context, ro options.RunOptions, args []string, signers .
 		// TODO: Find out explicit way to describe "prefix" in CLI options
 		outfile := ro.OutFilePath
 		if result.AttestorName != "" {
-			outfile += "-" + result.AttestorName
+			outfile += "-" + result.AttestorName + ".json"
 		}
-		outfile += ".json"
 
 		out, err := loadOutfile(outfile)
 		if err != nil {