tree 0863aac0579c3e988a5a92872f022b3335bff43d
parent 64c5db5fe4e52edda642d5e5ce4184de35bd1b9a
author Jonathan Amsterdam <jba@google.com> 1649449592 -0400
committer Jonathan Amsterdam <jba@google.com> 1649786534 +0000

cmd/govulncheck: add hermetic tests for default mode

Add a test that runs the govulncheck binary on a module and vuln DB
that are completely controlled by this module.

- Create a tiny local vuln DB with a couple of vulns.

- In our tests, run govulncheck with the GOVULNDB env var set to
  that DB.

- Define two trivial modules that differ only in the version of
  a dependent module: one version matches a vulnerability in our DB,
  and one does not.

- Create a test that runs govulncheck on each module, and verify
  that the vulnerability is found and the output is what we expect.

Change-Id: Idc053ab3a451375f7a211b4bb24d0ec282d2aaa0
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/399234
Run-TryBot: Jonathan Amsterdam <jba@google.com>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>