tree 160f6e62c2729107b578f7db58f671d72d25f4a8
parent 7d9f45139f4a37b6e3a0425947d50b0df7368347
author Hana (Hyang-Ah) Kim <hyangah@gmail.com> 1669173570 -0500
committer Hyang-Ah Hana Kim <hyangah@gmail.com> 1669247595 +0000

gopls/internal/lsp/mod: add the vulncheck diagnostics mode

When user sets `"ui.vulncheck": "Imports"`, gopls will run the
vulnerability scanning on the modules used in the project
as part of the go.mod diagnostics. This scanning mode is less
expensive than the govulncheck callgraph analysis so it can
run almost in real time, but it is less precise than the govulncheck
callgraph analysis.

In the follow up change, we will add a code action that
triggers the more precise govulncheck callgraph analysis.

Change-Id: Ibf479c733c7e1ff98a3e74854c0f77ac6a6b5445
Reviewed-on: https://go-review.googlesource.com/c/tools/+/453156
gopls-CI: kokoro <noreply+kokoro@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Robert Findley <rfindley@google.com>
Run-TryBot: Hyang-Ah Hana Kim <hyangah@gmail.com>