vulncheck: add ResultVersion

Add an exported string that can be used to cache results.  We use a
value controlled by the developer, rather than a git hash or tag,
because not every change to the package will change its results, and
we don't want to invalidate cached values unnecessarily.

Change-Id: I018cdc7a0a237c086d377938af9496def714cd0e
Run-TryBot: Jonathan Amsterdam <>
TryBot-Result: Gopher Robot <>
Reviewed-by: Zvonimir Pavlinovic <>
1 file changed
tree: dcdd7d3c83837439fcaa9dc8f5cb8fd11f273686
  1. client/
  2. cmd/
  3. devtools/
  4. doc/
  5. internal/
  6. osv/
  7. vulncheck/
  8. .gitignore
  9. all_test.go
  10. checks.bash
  12. go.mod
  13. go.sum
  17. tools_test.go

Go Vulnerability Management

Go Reference

This repository contains the following:

  • Package client: a client for interacting with the Go vulnerability database
  • Package vulncheck: an API for detecting vulnerabilities in Go packages
  • Command govulncheck: a CLI for detecting vulnerabilities in Go packages

The code in this repository is under active development and not to be considered stable.


Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at are distributed under the terms of the CC-BY 4.0 license.