from: image to: manifest evidence: - file: "image/verify.go" contains " "github.com/apache/mynewt-artifact/manifest""