commit	e3b973efe6965c30f1800e49b7038a7bcf0b7882	[log] [tgz]
author	Maceo Thompson <maceothompson@google.com>	Mon May 22 21:23:01 2023 +0000
committer	Maceo Thompson <maceothompson@google.com>	Tue May 30 18:28:38 2023 +0000
tree	a7fee3c41dd102b81ec1037eac2cad7178fbb001
parent	5df41500c6e51e1553784a8a2cf52d7f8cacb67d [diff]

internal, cmd: pin govulncheck to new version

This change updates govulncheck to the latest version @master, and
changes logic to reflect the new json output. This includes updating the
local vulndb test data to reflect the new vulndb schema and updating
various tests related to running govulncheck in the ecosystem metrics
pipeline.

Change-Id: I7c0394e6d78844f9deb19485040b8030748109de
Reviewed-on: https://go-review.googlesource.com/c/pkgsite-metrics/+/496887
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
Reviewed-by: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Maceo Thompson <maceothompson@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>

cmd/govulncheck_sandbox/govulncheck_sandbox.go[diff]
cmd/govulncheck_sandbox/govulncheck_sandbox_test.go[diff]
go.mod[diff]
go.sum[diff]
internal/govulncheck/govulncheck.go[diff]
internal/govulncheck/govulncheck_test.go[diff]
internal/govulncheck/handler.go[Added - diff]
internal/govulncheck/handler_test.go[Added - diff]
internal/govulncheckapi/handler.go[Added - diff]
internal/govulncheckapi/result.go[Added - diff]
internal/testdata/vulndb/ID/GO-2020-0015.json[Added - diff]
internal/testdata/vulndb/ID/GO-2021-0113.json[Added - diff]
internal/testdata/vulndb/golang.org/x/text.json[Deleted - diff]
internal/testdata/vulndb/index.json[Deleted - diff]
internal/testdata/vulndb/index/db.json[Added - diff]
internal/testdata/vulndb/index/modules.json[Added - diff]
internal/testdata/vulndb/index/vulns.json[Added - diff]
internal/worker/govulncheck.go[diff]
internal/worker/govulncheck_scan.go[diff]
internal/worker/govulncheck_scan_test.go[diff]
internal/worker/server.go[diff]

21 files changed

tree: a7fee3c41dd102b81ec1037eac2cad7178fbb001

README.md

pkgsite-metrics

This repository contains code that serves pkg.go.dev/metrics.

Report Issues / Send Patches

This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://golang.org/doc/contribute.html.

The main issue tracker for the time repository is located at https://github.com/golang/go/issues. Prefix your issue with “x/pkgsite-metrics:” in the subject line, so it is easy to find.