Google Git
Sign in
go / vuln / f78f1453b9231617fa207b14863319d2c7ca1c9b
commitf78f1453b9231617fa207b14863319d2c7ca1c9b[log] [tgz]
authorJonathan Amsterdam <jba@google.com>Thu Jun 09 12:38:39 2022 -0400
committerJonathan Amsterdam <jba@google.com>Fri Jul 01 14:44:32 2022 +0000
tree2a16f8f6cf3e06038f5e6f0c3b2950209409eaf4
parent14f9a01c0b947dc2f7de4e93e917f828321f7c05 [diff]
cmd/govulncheck: work with Go 1.17

The govulncheck command will now work on source if compiled with
Go 1.17. It will fail if run on a binary.

Run the tests that match command output only on 1.18 or higher.

Change-Id: Ia3e23a130f822c55dee94b95dc2a01c96b6269e5
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/411454
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
15 files changed
tree: 2a16f8f6cf3e06038f5e6f0c3b2950209409eaf4
  1. client/
  2. cmd/
  3. devtools/
  4. doc/
  5. internal/
  6. osv/
  7. vulncheck/
  8. .gitignore
  9. all_test.go
  10. AUTHORS
  11. checks.bash
  12. CONTRIBUTING.md
  13. CONTRIBUTORS
  14. go.mod
  15. go.sum
  16. LICENSE
  17. PATENTS
  18. README.md
  19. tools_test.go
README.md

Go Vulnerability Management

Go Reference

This repository contains the following:

  • Package client: a client for interacting with the Go vulnerability database
  • Package vulncheck: an API for detecting vulnerabilities in Go packages
  • Command govulncheck: a CLI for detecting vulnerabilities in Go packages

The code in this repository is under active development and not to be considered stable.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.