tree ed0a109a53e64def09805fab1b1e1020c9a4651d
parent bf472d2030dca36c085c870538ba5d22d8db3fc5
author Zvonimir Pavlinovic <zpavlinovic@google.com> 1732660158 +0000
committer Zvonimir Pavlinovic <zpavlinovic@google.com> 1732741380 +0000

cmd/govulncheck: better mask new (sbom) versions

Using +dirty to match binary versions produced by new go build stamping
feature is not sufficient. In general, the build version will depend on
the git state and the vuln repo version. We hence only emit sbom
messages for the prebuild binaries.

Updates golang/go#70523

Change-Id: Id55307b4cef2af3f4ff4685bb34f001554fa4dd4
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/632155
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Ian Cottrell <iancottrell@google.com>