tree df9c685e770ef9c48d3a350c0089ba0404329d9e
parent 59dc5d59e71974ecf7c4861a16a6c5a3cd73e47c
author Julie Qiu <julie@golang.org> 1638831329 -0500
committer Julie Qiu <julie@golang.org> 1638897422 +0000

internal/worker: use candidate module path

cveModulePath now uses candidateModulePaths, so that longer module paths
that are not the repo path are caught.

For golang/go#49733

Change-Id: I96e0462f115afa4cdd85a8c6dd770f96dafdb4f1
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/369750
Reviewed-by: Jonathan Amsterdam <jba@google.com>
Trust: Julie Qiu <julie@golang.org>
Run-TryBot: Julie Qiu <julie@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>