internal/worker: make go-vulndb path consistent and explicit

- Sandbox and docker use the same location of go-vulndb
- We pass this location to the sandbox instead of hardcoding it into the
  sandbox implementation
- scanner now uses this path, which enables testing

The vulndb location is dictated via GO_ECOSYSTEM_VULNDB_DIR environment
variable, similar to how directory with binaries is handled.

Change-Id: I738c4fd454ae28def478c0440147a78564bb5772
Reviewed-on: https://go-review.googlesource.com/c/pkgsite-metrics/+/477358
Reviewed-by: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
6 files changed
tree: 91d56120735e287fc1046dd21e39c78dfcc118ed
  1. cmd/
  2. deploy/
  3. devtools/
  4. internal/
  5. terraform/
  6. .dockerignore
  7. .gitignore
  8. all_test.go
  9. checks.bash
  10. config.json.commented
  11. CONTRIBUTING.md
  12. go.mod
  13. go.sum
  14. LICENSE
  15. Makefile
  16. PATENTS
  17. README.md
  18. tools.go
README.md

pkgsite-metrics

This repository contains code that serves pkg.go.dev/metrics.

Report Issues / Send Patches

This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://golang.org/doc/contribute.html.

The main issue tracker for the time repository is located at https://github.com/golang/go/issues. Prefix your issue with “x/pkgsite-metrics:” in the subject line, so it is easy to find.