)]}'
{
  "commit": "680e4a313e30bf7e64efc52b24d4e5c0a0756ac0",
  "tree": "1ee504d3b4b1d7d3eff3123effef5af2ec32bddf",
  "parents": [
    "1dedb030b7d7506f84955b3a88debb18fbf1f8aa"
  ],
  "author": {
    "name": "Russ Cox",
    "email": "rsc@golang.org",
    "time": "Thu Oct 27 16:52:51 2022 -0400"
  },
  "committer": {
    "name": "Russ Cox",
    "email": "rsc@golang.org",
    "time": "Fri Oct 28 17:25:09 2022 +0000"
  },
  "message": "vgo: add spurious dependency on github.com/miekg/dns v1.0.0\n\nThis dependency is vulnerable to GO-2020-0006.\nThe point of this commit is to serve as a test case for\nautomated vulnerability scanning of the Go repos.\n\nUsing the vgo repo because it contains nothing\nimportant and is not imported by any of our other repos,\nwhich means any report should be limited to x/vgo\nand not affect other users.\n\nEven if people did depend on x/vgo, govulncheck would\ncorrectly identify that no code here calls the vulnerable\nsymbols in github.com/miekg/dns. Only less precise\nscanners would suggest that there is a problem.\n\nChange-Id: I97dca1c146b84764e867128710cf262ea6b68276\nReviewed-on: https://go-review.googlesource.com/c/vgo/+/446055\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nAuto-Submit: Russ Cox \u003crsc@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "8b211da3099497e6830768dc636497a285352c2d",
      "old_mode": 33188,
      "old_path": "go.mod",
      "new_id": "6876fe7497807efafd7824761822a1952fa2cd8f",
      "new_mode": 33188,
      "new_path": "go.mod"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "7af1a4f8f1d30455cff7e35948453023ac4f3721",
      "new_mode": 33188,
      "new_path": "go.sum"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "fc22fbc1ed4e3176a26cbe07a3a835a43583c12d",
      "new_mode": 33188,
      "new_path": "vulnerable.go"
    }
  ]
}