reports: sets github.com/dgrijalva/jwt-go as incompatible.
github.com/dgrijalva/jwt-go is not module per se. Hence, its pkg
versions require +incompatible annotation. Also, corresponding pkgs do
not have /vX suffixes.
Change-Id: I434b1a6af7ecd22b161d344a2ffe115fa9b883e9
Reviewed-on: https://team-review.git.corp.google.com/c/golang/vulndb/+/1027982
Reviewed-by: Roland Shoemaker <bracewell@google.com>
diff --git a/reports/GO-2020-0017.toml b/reports/GO-2020-0017.toml
index d868d32..66e5753 100644
--- a/reports/GO-2020-0017.toml
+++ b/reports/GO-2020-0017.toml
@@ -15,7 +15,7 @@
[[versions]]
introduced = "v0.0.0-20150717181359-44718f8a89b0"
-fixed = "v4.0.0-20190408214815-ec0a89a131e"
+fixed = "v4.0.0-20190408214815-ec0a89a131e+incompatible"
[[additional_packages]]
package = "github.com/dgrijalva/jwt-go/v4"
@@ -25,4 +25,4 @@
[links]
commit = "https://github.com/dgrijalva/jwt-go/commit/ec0a89a131e3e8567adcb21254a5cd20a70ea4ab"
-context = ["https://github.com/dgrijalva/jwt-go/issues/422"]
\ No newline at end of file
+context = ["https://github.com/dgrijalva/jwt-go/issues/422"]
