|author||Suzy Mueller <email@example.com>||Tue Nov 22 14:54:57 2022 -0500|
|committer||Suzy Mueller <firstname.lastname@example.org>||Wed Nov 23 20:24:01 2022 +0000|
gopls: add diagnostics for both vulns used and not used Add separate diagnostics with different severity levels in order to capture both reachable and unreachable vulnerabilites in the diagnostics. Change-Id: Ib7fa422d9ef7f84e85a5da30b6cf766618cb583c Reviewed-on: https://go-review.googlesource.com/c/tools/+/452837 TryBot-Result: Gopher Robot <email@example.com> Run-TryBot: Suzy Mueller <firstname.lastname@example.org> gopls-CI: kokoro <email@example.com> Reviewed-by: Hyang-Ah Hana Kim <firstname.lastname@example.org>
This repository provides the
golang.org/x/tools module, comprising various tools and packages mostly for static analysis of Go programs, some of which are listed below. Use the “Go reference” link above for more information about any package.
It also contains the
golang.org/x/tools/gopls module, whose root package is a language-server protocol (LSP) server for Go. An LSP server analyses the source code of a project and responds to requests from a wide range of editors such as VSCode and Vim, allowing them to support IDE-like functionality.
cmd/goimportsformats a Go program like
go fmtand additionally inserts import statements for any packages required by the file after it is edited.
cmd/callgraphprints the call graph of a Go program.
cmd/digraphis a utility for manipulating directed graphs in textual notation.
cmd/stringergenerates declarations (including a
Stringmethod) for “enum” types.
cmd/toolstashis a utility to simplify working with multiple versions of the Go toolchain.
These commands may be fetched with a command such as
go install golang.org/x/tools/cmd/goimports@latest
go/ssa provides a static single-assignment form (SSA) intermediate representation (IR) for Go programs, similar to a typical compiler, for use by analysis tools.
go/packages provides a simple interface for loading, parsing, and type checking a complete Go program from source code.
go/analysis provides a framework for modular static analysis of Go programs.
go/callgraph provides call graphs of Go programs using a variety of algorithms with different trade-offs.
go/ast/inspector provides an optimized means of traversing a Go parse tree for use in analysis tools.
go/cfg provides a simple control-flow graph (CFG) for a Go function.
go/expect reads Go source files used as test inputs and interprets special comments within them as queries or assertions for testing.
go/gccgoexportdata read and write the binary files containing type information used by the standard and
go/types/objectpath provides a stable naming scheme for named entities (“objects”) in the
Numerous other packages provide more esoteric functionality.
This repository uses Gerrit for code changes. To learn how to submit changes, see https://golang.org/doc/contribute.html.
The main issue tracker for the tools repository is located at https://github.com/golang/go/issues. Prefix your issue with “x/tools/(your subdir):” in the subject line, so it is easy to find.
This repository uses prettier to format JS and CSS files.
The version of
prettier used is 1.18.2.
It is encouraged that all JS and CSS code be run through this before submitting a change. However, it is not a strict requirement enforced by CI.