commit	975d4c73dae3108aaa64e87a75e96b1882d1156e	[log] [tgz]
author	Tim King <taking@google.com>	Wed Jan 04 13:52:33 2023 -0800
committer	Tim King <taking@google.com>	Mon Jan 09 20:25:29 2023 +0000
tree	a5c9607e5ae2c22a860cb503c9d62a231a440d46
parent	ff355248a728258ab807cbb960ddacf6ec3ba64a [diff]

vulncheck: build callgraph in parallel with fetching db

Source(...) now builds the *ssa.Program and callgraph from
the *ssa.Program in parallel with fetching vulnerabilities.
Returns as soon as the vuln set is empty.

Updates golang/go#57357

Change-Id: I310b93f7125b5edcc2a5744db9f9f595c70aa5d4
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/460420
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Alan Donovan <adonovan@google.com>
Run-TryBot: Tim King <taking@google.com>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>

2 files changed

tree: a5c9607e5ae2c22a860cb503c9d62a231a440d46

README.md

Go Vulnerability Management

This repository contains packages for accessing and analyzing data from the Go Vulnerability Database. It contains the following:

Package client: a client for interacting with the Go vulnerability database
Package vulncheck: an API for detecting vulnerabilities in Go packages
Command govulncheck: a CLI for detecting vulnerabilities in Go packages

Check out https://go.dev/security/vuln for more information about the Go vulnerability management system.

Privacy Policy

The privacy policy for govulncheck can be found at https://vuln.go.dev/privacy.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.