feat(carvel-dev/imgpkg): cosign config (#32936)

* refactor(carvel-dev/imgpkg): re-scaffold

* fix(carvel-dev/imgpkg): bring back aliases lost on re-scaffold

* feat(carvel-dev/imgpkg): cosign config

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

pkgs/carvel-dev/imgpkg/pkg.yaml

@@ -1,8 +1,18 @@
 packages:
   - name: carvel-dev/[email protected]
+  - name: carvel-dev/imgpkg
+    version: v0.39.0
   - name: carvel-dev/imgpkg
     version: v0.35.0
   - name: carvel-dev/imgpkg
-    version: v0.34.1
+    version: v0.27.3
   - name: carvel-dev/imgpkg
     version: v0.27.1
+  - name: carvel-dev/imgpkg
+    version: v0.27.0
+  - name: carvel-dev/imgpkg
+    version: v0.17.0
+  - name: carvel-dev/imgpkg
+    version: v0.16.0
+  - name: carvel-dev/imgpkg
+    version: v0.12.0

pkgs/carvel-dev/imgpkg/registry.yaml

@@ -6,35 +6,102 @@ packages:
     aliases:
       - name: vmware-tanzu/carvel-imgpkg
     description: Store application configuration files in Docker/OCI registries
-    rosetta2: true
-    format: raw
-    asset: imgpkg-{{.OS}}-{{.Arch}}
-    version_constraint: semver(">= 0.36.0")
-    supported_envs:
-      - darwin
-      - linux
-      - amd64
-    checksum:
-      type: github_release
-      asset: checksums.txt
-      algorithm: sha256
+    version_constraint: "false"
     version_overrides:
-      - version_constraint: semver("= 0.35.0")
+      - version_constraint: Version == "v0.17.0"
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        rosetta2: true
+        windows_arm_emulation: true
+        supported_envs:
+          - darwin
+          - windows
+          - amd64
+      - version_constraint: Version == "v0.27.1"
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
+        supported_envs:
+          - darwin
+          - windows
+          - amd64
+      - version_constraint: Version == "v0.27.3"
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+        supported_envs:
+          - darwin
+          - windows
+          - amd64
+      - version_constraint: Version == "v0.35.0"
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
         checksum:
           type: github_release
           asset: checksum.txt
           algorithm: sha256
-      - version_constraint: semver(">= 0.28.0")
+      - version_constraint: semver("<= 0.12.0")
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        rosetta2: true
+        windows_arm_emulation: true
         supported_envs:
           - darwin
+          - windows
           - amd64
+      - version_constraint: semver("<= 0.16.0")
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        rosetta2: true
+        windows_arm_emulation: true
         checksum:
           type: github_release
           asset: checksums.txt
           algorithm: sha256
-      - version_constraint: "true"
+        supported_envs:
+          - darwin
+          - windows
+          - amd64
+      - version_constraint: semver("<= 0.27.0")
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
         checksum:
-          enabled: false
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
         supported_envs:
           - darwin
+          - windows
           - amd64
+      - version_constraint: semver("< 0.40.0")
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: "true"
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity
+              - https://github.com/carvel-dev/imgpkg/.github/workflows/release.yml@refs/tags/{{.Version}}
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+              - --signature
+              - https://github.com/carvel-dev/imgpkg/releases/download/{{.Version}}/checksums.txt.sig
+              - --certificate
+              - https://github.com/carvel-dev/imgpkg/releases/download/{{.Version}}/checksums.txt.pem