commit	d7018605aec49e56e47271ad5d00abedfad44b82	[log] [tgz]
author	Jonathan Amsterdam <jba@google.com>	Fri Apr 08 08:45:24 2022 -0400
committer	Jonathan Amsterdam <jba@google.com>	Tue Apr 12 15:47:46 2022 +0000
tree	eaa396ccd14438da6847b27f24f08083d68ea6b3
parent	f3137a66416d24e06f1bd985aa007caa19d9d55d [diff]

cmd/govulncheck: test the command directly

Add a test that builds govulncheck and compares its output to a golden.

This uses the github.com/google/go-cmdtest package, which makes it easy
to do that.

Move the buildtest package out of vulncheck/internal so cmd/govulncheck
can use it, and fix a bug when GoBuild is passed ".".

Change-Id: I2e216f1980cfe0548e7231531bd68b2996142917
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/399115
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>

cmd/govulncheck/main.go[diff]
cmd/govulncheck/main_test.go[diff]
cmd/govulncheck/testdata/usage.ct[Added - diff]
go.mod[diff]
go.sum[diff]
internal/buildtest/buildtest.go[Renamed from vulncheck/internal/buildtest/buildtest.go - diff]
vulncheck/internal/binscan/scan_test.go[diff]
vulncheck/internal/gosym/pclntab_test.go[diff]

8 files changed

tree: eaa396ccd14438da6847b27f24f08083d68ea6b3

README.md

Go Vulnerability Management

This repository contains the following:

Package client: a client for interacting with the Go vulnerability database
Package vulncheck: an API for detecting vulnerabilities in Go packages
Command govulncheck: a CLI for detecting vulnerabilities in Go packages

The code in this repository is under active development and not to be considered stable.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.