tree 9e37253ad4298b48556d25765e6e70814fe78a81
parent 9519368a491771888d4c56af67a8519b48b0105f
author Hana (Hyang-Ah) Kim <hyangah@gmail.com> 1669224715 -0500
committer Hyang-Ah Hana Kim <hyangah@gmail.com> 1669247610 +0000

gopls/internal/lsp: include all vulns info to fetch_vulncheck_result

In addition to the govulncheck analysis result, gopls now has its own
vulnerability scanning that reports vulnerabilities on known packages
in the workspace. While we are still debating on the right name for
this analysis mode, let's call it 'light-weight' vuln scanning because
this is less expensive than the govulncheck analysis (but with less
precise result).

fetch_vulncheck_result now includes the vulnerability analysis results
from the light-weight vuln scanning. We distinguish the analysis source
by adding Analysis field in the govulncheck.Result type.

For each go.mod, if govulncheck result exists, return it.
Otherwise, return the light-weight vuln scanning result if it is
available in the snapshot.

Change-Id: I8d53db474137cecc1138ae432207bf508c09ca6f
Reviewed-on: https://go-review.googlesource.com/c/tools/+/453195
Reviewed-by: Robert Findley <rfindley@google.com>
Run-TryBot: Hyang-Ah Hana Kim <hyangah@gmail.com>
gopls-CI: kokoro <noreply+kokoro@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>