cmd/govulncheck/internal/govulncheck: new package

Create a new internal package to hold some of govulncheck's code.
This will make it easier for gopls's implementation of vulnerability
checking to use the code. They will still have to copy it, but
the copying should be trivial.

This CL moves the vuln DB cache into the new package.
It is the first of several.

Change-Id: I56add35ee99b1e4cb7bdb882646a21661f798c37
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/406580
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
Reviewed-by: Hyang-Ah Hana Kim <hyangah@gmail.com>
3 files changed
tree: 5fc9ba73b972bb0dd85bbd40fc9835453c302969
  1. client/
  2. cmd/
  3. devtools/
  4. doc/
  5. internal/
  6. osv/
  7. vulncheck/
  8. .gitignore
  9. all_test.go
  10. AUTHORS
  11. checks.bash
  12. CONTRIBUTING.md
  13. CONTRIBUTORS
  14. go.mod
  15. go.sum
  16. LICENSE
  17. PATENTS
  18. README.md
  19. tools_test.go
README.md

Go Vulnerability Management

Go Reference

This repository contains the following:

  • Package client: a client for interacting with the Go vulnerability database
  • Package vulncheck: an API for detecting vulnerabilities in Go packages
  • Command govulncheck: a CLI for detecting vulnerabilities in Go packages

The code in this repository is under active development and not to be considered stable.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.