internal/worker: add logic to run govulncheck insecure in docker

This change slightly modifies the way the govulncheck binary is called in runGoVulncheckInsecure
and installs the govulncheck binary in the sandbox binaries directory.
This makes running govulncheck in sandbox mode much easier.

Change-Id: If5924bfc2399c319cb1e5ffe261ec1d434339e46
Reviewed-on: https://go-review.googlesource.com/c/pkgsite-metrics/+/472577
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
Run-TryBot: Maceo Thompson <maceothompson@google.com>
Reviewed-by: Jonathan Amsterdam <jba@google.com>
2 files changed
tree: 8ee554c4eb39fd73fb1863daad3d018e61138bb5
  1. cmd/
  2. deploy/
  3. devtools/
  4. internal/
  5. static/
  6. terraform/
  7. .dockerignore
  8. .gitignore
  9. all_test.go
  10. checks.bash
  11. config.json.commented
  12. CONTRIBUTING.md
  13. go.mod
  14. go.sum
  15. LICENSE
  16. Makefile
  17. PATENTS
  18. README.md
  19. tools_test.go
README.md

pkgsite-metrics

This repository contains code that serves pkg.go.dev/metrics.

Report Issues / Send Patches

This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://golang.org/doc/contribute.html.

The main issue tracker for the time repository is located at https://github.com/golang/go/issues. Prefix your issue with “x/pkgsite-metrics:” in the subject line, so it is easy to find.