)]}'
{
  "log": [
    {
      "commit": "0782b76014f15f24e22a438f30f308df42899ba1",
      "tree": "ab964d2a02df954a8287a4051f71defb424c4354",
      "parents": [
        "5499630db5f896778f084a8b3720910426de5c53"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Apr 22 14:52:24 2026 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Apr 22 15:03:04 2026 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I9dd9e27e85ad5a27c61bc13940f3cf20f2dc3c8b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/769900\nReviewed-by: Hyang-Ah Hana Kim \u003chyangah@gmail.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\n"
    },
    {
      "commit": "5499630db5f896778f084a8b3720910426de5c53",
      "tree": "b41fbfcbd5bcb0c14c97d2da02ee764657c0a74d",
      "parents": [
        "a8075323febce35764797d66a61fa9e19a8d9797"
      ],
      "author": {
        "name": "Roland Shoemaker",
        "email": "roland@golang.org",
        "time": "Wed Apr 15 08:31:32 2026 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Apr 15 09:18:40 2026 -0700"
      },
      "message": "internal/scan: exit after printing version info\n\nWhen -version flag is passed, print the version information and exit\nimmediately without trying to do any scanning. This is different than\nthe behavior of the -show flag, which prints information and then\ncontinues with the scan.\n\nThis prevents govulncheck from returning a non-zero exit code when\n-version is passed, without any package patterns.\n\nFixes golang/go#78743\n\nChange-Id: I9b1efa56f067e209956bd38cd77d7055fa70a7ce\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/767300\nReviewed-by: Ethan Lee \u003cethanalee@google.com\u003e\nAuto-Submit: Roland Shoemaker \u003croland@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "a8075323febce35764797d66a61fa9e19a8d9797",
      "tree": "da547979c8e5528da22f09f350aa35ca0e368adc",
      "parents": [
        "4ac723d6af9abfcea6ef5a6d7aec65e68b8738dd"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Apr 09 14:51:19 2026 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Apr 10 02:52:11 2026 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Icc6dd9750a9b5fabba1977e9921171fd2ea1a63b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/764903\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "4ac723d6af9abfcea6ef5a6d7aec65e68b8738dd",
      "tree": "4209619d7ef4f88ffeda47b37f0444a27a4caae0",
      "parents": [
        "a9cf566971d512048614ae269b160fe47a1fceb3"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Mar 11 20:59:06 2026 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Mar 12 08:32:31 2026 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I92836660eb85237dbe0222629ee2a4fe27d5fb60\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/754642\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "a9cf566971d512048614ae269b160fe47a1fceb3",
      "tree": "bc85b204af74469c7db43db1675ce9dbeb48aaf8",
      "parents": [
        "930824204a6bb5ef98fee43315ce187ccd0b7cc1"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Feb 11 18:54:10 2026 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Feb 11 11:14:01 2026 -0800"
      },
      "message": "all: upgrade go directive to at least 1.25.0 [generated]\n\nBy now Go 1.26.0 has been released, and Go 1.24 is no longer supported\nper the Go Release Policy (see https://go.dev/doc/devel/release#policy).\n\nSee go.dev/doc/godebug#go-125 for GODEBUG changes relevant to Go 1.25.\n\nFor golang/go#69095.\n\n[git-generate]\n(cd . \u0026\u0026 go get go@1.25.0 \u0026\u0026 go mod tidy)\n\nChange-Id: I1e0e2dddb829a1c694311860dca6ad12d3ce0e64\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/744542\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Junyang Shao \u003cshaojunyang@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Michael Pratt \u003cmpratt@google.com\u003e\n"
    },
    {
      "commit": "930824204a6bb5ef98fee43315ce187ccd0b7cc1",
      "tree": "21f209bdb1dc075f459d3e009adb8879a2183d55",
      "parents": [
        "a0d18c9179e09b31b78e3b54532c9c9a9071451e"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Feb 09 11:44:22 2026 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Feb 09 12:38:27 2026 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Iff96bdb4be5583762c7ab6930fc0f44798c72962\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/743365\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "a0d18c9179e09b31b78e3b54532c9c9a9071451e",
      "tree": "55c9904a570cc2bd2d88da1ddfdc284b056daf73",
      "parents": [
        "3276fb946d41e82354ca78d7d89e532f7dd00e8f"
      ],
      "author": {
        "name": "Dmitri Shuralyov",
        "email": "dmitshur@golang.org",
        "time": "Wed Jan 28 19:06:50 2026 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Feb 04 15:45:31 2026 -0800"
      },
      "message": "vuln: add codereview.cfg\n\nFor golang/go#9273.\n\nChange-Id: Ib211352fb8178fcab30d65974b4f9d3397924cba\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/740162\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: Sean Liao \u003csean@liao.dev\u003e\nAuto-Submit: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Michael Pratt \u003cmpratt@google.com\u003e\n"
    },
    {
      "commit": "3276fb946d41e82354ca78d7d89e532f7dd00e8f",
      "tree": "59fa4cd18607a11525b4dee9387d741f3e9265db",
      "parents": [
        "ff5c0046886fb6c339f4b0c00ce6bfb119f00006"
      ],
      "author": {
        "name": "Robert Griesemer",
        "email": "gri@google.com",
        "time": "Tue Jan 27 12:57:55 2026 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jan 27 15:50:21 2026 -0800"
      },
      "message": "cmd/govulncheck: remove gotypesalias.go (not needed anymore)\n\nFixes #77335.\nFor #76472.\n\nChange-Id: I3c76d6b90fa1c7b8fae892c75d0fc13c83dc2ad9\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/739740\nAuto-Submit: Robert Griesemer \u003cgri@google.com\u003e\nReviewed-by: Robert Griesemer \u003cgri@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\n"
    },
    {
      "commit": "ff5c0046886fb6c339f4b0c00ce6bfb119f00006",
      "tree": "85020e15bb12eee7209a9b7329d60b65add0a782",
      "parents": [
        "6698294903005319aedf73447119a0fe4d74952d"
      ],
      "author": {
        "name": "Ethan Lee",
        "email": "ethanalee@google.com",
        "time": "Tue Jan 13 19:46:58 2026 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jan 13 13:25:18 2026 -0800"
      },
      "message": "internal/scan: improve error message for govulncheck\n\n- Previously, an error was not returned if the govulncheck function was\n  called without any patterns.\n- Now if patterns are not included, then an explicit error is returned\n  indicating to users that they should specify patterns or simply use\n  `govulncheck ./...`.\n\nFixes golang/go#77167\n\nChange-Id: I539246a6f18b50937068ce9c984d0d3e4973c534\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/736180\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nAuto-Submit: Ethan Lee \u003cethanalee@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "6698294903005319aedf73447119a0fe4d74952d",
      "tree": "19bca0f6e613ab4dd14ed58702a56bba1068d6d0",
      "parents": [
        "5e9b76bd55b161cc5c11e1d5f5946be6ee4bbd20"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Jan 12 11:13:07 2026 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Jan 12 11:57:00 2026 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Ibf4edf9499236f7c85700d38179ec5bc1746aec9\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/735760\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\n"
    },
    {
      "commit": "5e9b76bd55b161cc5c11e1d5f5946be6ee4bbd20",
      "tree": "24350cf2fa0e3c1d4fa29a16bc873e2514dad6b5",
      "parents": [
        "b44c4186c99c518ac35fe2535ec850c2444fa2aa"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Dec 08 16:12:27 2025 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Dec 09 07:00:19 2025 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I70fe6334d4f8598928ce80f63b84e41c9ba223fe\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/728542\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "b44c4186c99c518ac35fe2535ec850c2444fa2aa",
      "tree": "73c1b1223643e144aa47a91675a7376ff05a3d92",
      "parents": [
        "5792169213acd0c0a4d73f7ac8b2d11b238e1798"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Nov 12 19:46:15 2025 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Nov 13 11:27:39 2025 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I05004896311d06018d335d36a6f25c97641edf68\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/720160\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "5792169213acd0c0a4d73f7ac8b2d11b238e1798",
      "tree": "4af2dd2e64cc978e6fae38c40b0f7cdc18bd6ccb",
      "parents": [
        "c1d695f842079a0bb8ee64ebd7aa5e37de77f1ac"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Oct 08 17:06:00 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Oct 09 07:41:55 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I3c822cfa83dda6ad2e5097e42ddcf63fb48dc48f\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/710102\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "c1d695f842079a0bb8ee64ebd7aa5e37de77f1ac",
      "tree": "c800021aab0e19295faa2ff5338a0f2781c35450",
      "parents": [
        "774cde5e03be6cddba74dbeda8a3809e0f4497da"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Sep 10 09:39:30 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Sep 11 02:16:12 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Ia93c2f3870f32569a691ac957a6a38c5862e9833\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/702038\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "774cde5e03be6cddba74dbeda8a3809e0f4497da",
      "tree": "8565063b21480a3595a162541df0f961099b0623",
      "parents": [
        "b9d319d7ce41a3991288754d7ec709166dce2619"
      ],
      "author": {
        "name": "Markus Kusano",
        "email": "kusano@google.com",
        "time": "Thu Sep 04 18:22:31 2025 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Sep 04 11:29:28 2025 -0700"
      },
      "message": "cmd/govulncheck: use docker image with go 1.25\n\nCI/CD is failing since we need \u003e\u003d1.24.0\n\nChange-Id: Ibf55d4f3ddea2597fd5b949657cf4aeaae3d40ca\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/701175\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nAuto-Submit: Markus Kusano \u003ckusano@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "b9d319d7ce41a3991288754d7ec709166dce2619",
      "tree": "4149b15bd1ace7986cf2a9966554d69ba30151de",
      "parents": [
        "418d7a27640bd4f40daeb8e80b5a106acb52b8f2"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Aug 13 14:22:06 2025 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Aug 13 07:55:26 2025 -0700"
      },
      "message": "all: upgrade go directive to at least 1.24.0 [generated]\n\nBy now Go 1.25.0 has been released, and Go 1.23 is no longer supported\nper the Go Release Policy (see https://go.dev/doc/devel/release#policy).\n\nFor golang/go#69095.\n\n[git-generate]\n(cd . \u0026\u0026 go get go@1.24.0 \u0026\u0026 go mod tidy \u0026\u0026 go fix ./... \u0026\u0026 go mod edit -toolchain\u003dnone)\n\nChange-Id: I8c7fffbd6834aaf4bfe61dd52166931be32bbe64\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/695815\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "418d7a27640bd4f40daeb8e80b5a106acb52b8f2",
      "tree": "aebfb81989a0b3aa5d91f293bba2d0ad338685b5",
      "parents": [
        "e6e15ef5428effbce25810b61f5fb8592720f0b0"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Aug 07 14:39:34 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Aug 08 08:08:56 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Ied8f0c2e033eb5bde57f00a15a81c054542657a8\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/694002\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nAuto-Submit: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "e6e15ef5428effbce25810b61f5fb8592720f0b0",
      "tree": "6169e04dbd954e9471cf7ca64468dbcd0d60660f",
      "parents": [
        "8158ec10275be999786b024d8f0f4e31e2950f2c"
      ],
      "author": {
        "name": "Dmitri Shuralyov",
        "email": "dmitshur@golang.org",
        "time": "Thu Aug 07 19:28:20 2025 -0400"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Aug 08 08:08:36 2025 -0700"
      },
      "message": "internal/buildinfo: stop testing the windows/arm port\n\nThe windows/arm port was marked broken and is removed in Go 1.26.\n\nFor #71671.\nFixes #74934.\n\nChange-Id: I2e80641fa2cba1a63b482a6ff46e1652a5497835\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/694215\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nAuto-Submit: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\n"
    },
    {
      "commit": "8158ec10275be999786b024d8f0f4e31e2950f2c",
      "tree": "bba967e2a649391e3ee03d68fd2e6c69ff531183",
      "parents": [
        "3244d20defa9d22148bb3bc37c25f938e998589b"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Jul 11 10:26:09 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Jul 11 11:53:15 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Iad9984e5f3d1e5376cffff7c6e8dcce7e8dfacc6\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/687555\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "3244d20defa9d22148bb3bc37c25f938e998589b",
      "tree": "0da17ff5774db31df2faf3f7c04e023fe005e82f",
      "parents": [
        "e4f767ca72215eb48121cb47a8678a97b63558c0"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Jun 05 16:30:03 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Thu Jun 05 20:31:02 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I5274060c3b12f92be6d6396282d8a4da4fb5110f\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/679223\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "e4f767ca72215eb48121cb47a8678a97b63558c0",
      "tree": "d0fc291a39a59a1ed0b49030d3013ab9dc4188f8",
      "parents": [
        "ded9de4227adfa43a0048856ef229a9c7b650829"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon May 05 14:56:30 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon May 05 17:55:59 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I108105b9fb7529a2d5631672148710da70cf731b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/670078\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\n"
    },
    {
      "commit": "ded9de4227adfa43a0048856ef229a9c7b650829",
      "tree": "fdea871131ba79f45453061d13aad0eeea48b80c",
      "parents": [
        "952382b61d58db9cbc339953cba83855c73436be"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Apr 07 19:17:41 2025 -0700"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Apr 08 06:38:18 2025 -0700"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I09dab0e15b5dff882ffa6ce0e2321721746b951b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/663618\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "952382b61d58db9cbc339953cba83855c73436be",
      "tree": "10ab43b6bbffcd359c1a6265c2999a4cdb8c8cae",
      "parents": [
        "ac9e4b8ec5bb3fc77fa27fdb63e1a0c779648d22"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Mar 05 12:57:18 2025 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Mar 05 13:30:32 2025 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I5287423def7a1e216b92d91bf1cac43304b46eeb\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/655040\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "ac9e4b8ec5bb3fc77fa27fdb63e1a0c779648d22",
      "tree": "3b23689fd0c45de50eaf7dc86aaa1cba2482a7bc",
      "parents": [
        "4e5ea6df0a7c5d3736006e32137ec378757962a3"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Feb 18 15:15:01 2025 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Feb 18 11:46:33 2025 -0800"
      },
      "message": "cmd/govulncheck/integration: update go version in Dockerfile\n\nOtherwise, the integration tests fails since we\u0027ve recently made the\nchange to require go1.23.0 as the minimum version for vuln repo.\n\nChange-Id: I68c3e06303a5b202c850c2655f636e3444ceba5f\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/650295\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nCommit-Queue: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Bypass: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "4e5ea6df0a7c5d3736006e32137ec378757962a3",
      "tree": "655bdd0c359b1d4787911130cc3dc175b2c44533",
      "parents": [
        "04448a11b180fa21d606f4f92acb667b25dca110"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Feb 14 21:17:15 2025 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Feb 14 13:53:08 2025 -0800"
      },
      "message": "all: upgrade go directive to at least 1.23.0 [generated]\n\nBy now Go 1.24.0 has been released, and Go 1.22 is no longer supported\nper the Go Release Policy (https://go.dev/doc/devel/release#policy).\n\nFor golang/go#69095.\n\n[git-generate]\n(cd . \u0026\u0026 go get go@1.23.0 \u0026\u0026 go mod tidy \u0026\u0026 go fix ./... \u0026\u0026 go mod edit -toolchain\u003dnone)\n\nChange-Id: I7b08d91ef3a54a2c6ffa8ebb3e7c2022dfa93031\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/649498\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\n"
    },
    {
      "commit": "04448a11b180fa21d606f4f92acb667b25dca110",
      "tree": "2b264b76484f3b50a612ae35b0b463873c7179d3",
      "parents": [
        "03fad6f89d5c526e6a0d4e4176efa648c38919c2"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Feb 10 10:28:08 2025 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Feb 10 10:53:41 2025 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Ic646f26a3f1ccd6f7b07c3a50c791fcd181614a5\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/648175\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "03fad6f89d5c526e6a0d4e4176efa648c38919c2",
      "tree": "24fcca4d3b1f703c45c132c88515594dc6c750b8",
      "parents": [
        "d1f380186385b4f64e00313f31743df8e4b89a77"
      ],
      "author": {
        "name": "Alan Donovan",
        "email": "adonovan@google.com",
        "time": "Tue Jan 28 12:48:41 2025 -0500"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jan 28 09:56:33 2025 -0800"
      },
      "message": "internal/vulncheck: add Unalias call\n\nChange-Id: I640f27e8418d5cb49c8af35b8679bde25eb30196\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/645055\nAuto-Submit: Alan Donovan \u003cadonovan@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "d1f380186385b4f64e00313f31743df8e4b89a77",
      "tree": "a6de67bbe10fc33019791de055de1e8766a42847",
      "parents": [
        "681aa9254bb430730f9ae00d6bfde6d13413a813"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Jan 06 10:08:08 2025 -0800"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Jan 06 11:26:26 2025 -0800"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Id2855137e0a9d4f22587cbae94f238a5fa37d14b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/640696\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "681aa9254bb430730f9ae00d6bfde6d13413a813",
      "tree": "a8caccd8faaa37f2f024c3923e9570eb134923ff",
      "parents": [
        "58ab49249c8782fbb1780a4aac3c942637a04947"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Dec 04 23:09:32 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Dec 04 23:37:04 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I3f7c8557285c51f16d444dec3215cc347f70c03a\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/633587\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "58ab49249c8782fbb1780a4aac3c942637a04947",
      "tree": "9b056fcfe0f54721faf8bd731a0bb79dfd8ab076",
      "parents": [
        "e45fa1058c760f9170199dbc958c732e6859039d"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Nov 27 17:22:07 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Dec 02 17:35:42 2024 +0000"
      },
      "message": "cmd/govulncheck: remove unnecessary fixups\n\nChange-Id: I5daa77a314fe03919766d8a0d9bd0799b3ae7868\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/632235\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "e45fa1058c760f9170199dbc958c732e6859039d",
      "tree": "ed0a109a53e64def09805fab1b1e1020c9a4651d",
      "parents": [
        "bf472d2030dca36c085c870538ba5d22d8db3fc5"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Nov 26 22:29:18 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Nov 27 21:03:00 2024 +0000"
      },
      "message": "cmd/govulncheck: better mask new (sbom) versions\n\nUsing +dirty to match binary versions produced by new go build stamping\nfeature is not sufficient. In general, the build version will depend on\nthe git state and the vuln repo version. We hence only emit sbom\nmessages for the prebuild binaries.\n\nUpdates golang/go#70523\n\nChange-Id: Id55307b4cef2af3f4ff4685bb34f001554fa4dd4\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/632155\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "bf472d2030dca36c085c870538ba5d22d8db3fc5",
      "tree": "c0801527837cf07317038e15f959b2168f39b519",
      "parents": [
        "072d4ef972913b7136211efe702a1e8bac3e7c6c"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Nov 21 19:28:43 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Fri Nov 22 18:51:56 2024 +0000"
      },
      "message": "cmd/govulncheck: mask dirty dependency versions\n\nGo tip has a new change that creates a valid dirty Go version\nfor dependencies that were before always (devel). We mask such versions\nto devel for the tests to pass. We will remove this mask after the new\nchange to Go versioning is the only one supported on builders.\n\nChange-Id: I0b8bc6238db47fbf808401047dfb6d5676d2f6c4\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/630735\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "072d4ef972913b7136211efe702a1e8bac3e7c6c",
      "tree": "4f6d80982a01243bc4e441133cde7d10a0e3de57",
      "parents": [
        "0481857dd011252284b990e4ed2519dd6906b181"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Nov 20 18:51:56 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Nov 20 20:24:37 2024 +0000"
      },
      "message": "cmd/govulncheck: add missing test data\n\nChange-Id: Ic40571f3e96516a996b06472f6ee6a71f77b1d3a\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/630255\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "0481857dd011252284b990e4ed2519dd6906b181",
      "tree": "46cc306e2a97aa6cc29a11d7187cfa5dc62362a0",
      "parents": [
        "d0fc691583b394200ca6ec375c956c1cb5ddb4a2"
      ],
      "author": {
        "name": "Tim King",
        "email": "taking@google.com",
        "time": "Wed Nov 13 13:38:41 2024 -0800"
      },
      "committer": {
        "name": "Tim King",
        "email": "taking@google.com",
        "time": "Wed Nov 13 22:13:01 2024 +0000"
      },
      "message": "cmd/govulncheck: set gotypesalias\u003d1 when using \u003e\u003d1.23 toolchain\n\nSet gotypesalias\u003d1 when using \u003e\u003d1.23 toolchain on all of\nthe main packages in x/tools that use go/types.\n\nThis effectively upgrades commit https://go.dev/cl/617095.\n\nFor golang/go#69772\n\nChange-Id: I9f3e64d348f6bffc75321a08145fde07fb4024a6\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/627715\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "d0fc691583b394200ca6ec375c956c1cb5ddb4a2",
      "tree": "4481731ffa28dc3f0a73d804b7fa216b07c97406",
      "parents": [
        "dba032fdf4c11513044cb2909fb26a3597101b9c"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Nov 08 17:26:07 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Nov 08 17:51:10 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I9293e80d25c605ff4f640bf4531655a53794ef12\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/626596\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "dba032fdf4c11513044cb2909fb26a3597101b9c",
      "tree": "fcc909e721b2a1cff48ea23766659833540497c2",
      "parents": [
        "47cd07203737de9431e5850bdbf6aae34ff82912"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Nov 05 21:05:46 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Fri Nov 08 15:41:59 2024 +0000"
      },
      "message": "internal/sarif: use empty arrays instead of nils\n\nSarif specification requires that some slice elements explicitly exist\nin the JSON output even if they are empty. For instance, results should\nbe an empty array if the sarif handler finished but found nothing.\nAnother example is tags. Each rule in govulncheck sarif has tags\nproperty that can sometimes be empty. If so, JSON should contain an\nempty slice of tags.\n\nFixes golang/go#70157\n\nChange-Id: I112181e4efa5bc0a1577ff98f1b9eab912ed814c\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/625656\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "47cd07203737de9431e5850bdbf6aae34ff82912",
      "tree": "9d5ee857587e740c7e90c8e8bc9e1572725fa30b",
      "parents": [
        "310101419746da4412169a12efa1463ec8fa4d40"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Nov 05 19:53:34 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Nov 05 20:14:42 2024 +0000"
      },
      "message": "cmd/govulncheck/testdata: expand set of go versions in fixup\n\nAn example is a multi-word release candidate.\n\nChange-Id: Id5ef9ebd1ba94dad692d5ae8a74f03cb513f24a9\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/625576\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "310101419746da4412169a12efa1463ec8fa4d40",
      "tree": "faa315bae54050aeae82e42cfff7dcdd6243f5ce",
      "parents": [
        "5234259f98b05cc2ec651fa12b39849a58e4aca6"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Oct 21 13:17:51 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Oct 21 17:35:13 2024 +0000"
      },
      "message": "cmd/govulncheck: remove unused fixup\n\nChange-Id: I465ad24e69cb77daa19b01b3dc9cf307ce300a57\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/621597\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "5234259f98b05cc2ec651fa12b39849a58e4aca6",
      "tree": "b684c34fd7f489c91e72519209b2ac49a6073bc9",
      "parents": [
        "0de853d99e29fe84d1e9e7306863eb60c0f9ef10"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Oct 15 15:43:11 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Oct 21 17:35:08 2024 +0000"
      },
      "message": "internal/scan: add amounts to sbom text output\n\nUpdates the sbom text output to include the number of root packages and\nnumber of found/scanned modules in the sbom text output.\n\nChange-Id: I3dd03031d3f8dbd348c3b807c661b4bb0b1b268b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/621596\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "0de853d99e29fe84d1e9e7306863eb60c0f9ef10",
      "tree": "59952bc2f94f1819404c04677ea197d1ec1517f0",
      "parents": [
        "a23ae09c0e5a968ef557bf8a41aecf9533080564"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Oct 07 13:16:49 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Fri Oct 11 16:36:09 2024 +0000"
      },
      "message": "internal/scan: remove \u0027scanning n packages...\u0027 msg\n\nRemoves the \"Scanning N packages across M dependent modules\" progress\nmessage, as it is superseded by the new SBOM message.\n\nChange-Id: I53629e9b47b147399c65f15d7eb7ef3365b2730e\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/618296\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "a23ae09c0e5a968ef557bf8a41aecf9533080564",
      "tree": "c58f5adff0b44d291495ae343624aac5f1ff3806",
      "parents": [
        "9124b27af3189bf70e44ed0f5895c0631b099f5f"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Oct 07 13:01:04 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Fri Oct 11 16:33:49 2024 +0000"
      },
      "message": "internal/scan: add SBOM to text output\n\nAdds the SBOM message to the text output, hidden behind the -verbose\nflag.\n\nChange-Id: I15c808df1e15bd339cf27912c9afed04d7146ef8\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/618295\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "9124b27af3189bf70e44ed0f5895c0631b099f5f",
      "tree": "e0e270a888daec6d49646f49d69ec3af654686ca",
      "parents": [
        "db75d0a826ad210b5015d07d4572d840b1d11f53"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Sep 30 13:09:38 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Oct 07 16:49:55 2024 +0000"
      },
      "message": "internal/vulncheck: pass SBOM to handlers\n\nPasses the SBOM message to the handlers when in source and binary mode.\n\nChange-Id: Id3ef03eb4294f731a18739477e710edd85ab755e\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/616935\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "db75d0a826ad210b5015d07d4572d840b1d11f53",
      "tree": "16904a25b985e2f472e87cf3833a25e2df2a1fc5",
      "parents": [
        "1aec043eebd3725f3e0b762baa719561323d09e5"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Oct 04 18:26:02 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Fri Oct 04 19:10:16 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Iab52f007bcc15baaf487223ecd2e5a00ea5bda41\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/617961\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "1aec043eebd3725f3e0b762baa719561323d09e5",
      "tree": "e65d00eb8f4df70d916cdd7596e125caaee7a307",
      "parents": [
        "fd700f319276bd3754b00af24ce1d020c453652e"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Wed Oct 02 16:53:45 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Thu Oct 03 16:48:40 2024 +0000"
      },
      "message": "internal/semver: add SemverToGoTag\n\nAdd SemverToGoTag, which reverses GoTagToSemver.\nThe exception is when converting a go tag to the semver would have\nresulted in an invalid semver (such as go RC versions). GoTagToSemver\nreturns an empty string in that case, and as such is not reversible.\n\nChange-Id: I8d68c2372261b1ec7ec8b72354ac1919ad24d6f6\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/617396\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "fd700f319276bd3754b00af24ce1d020c453652e",
      "tree": "514ca54c5c174fdb7c3a4bb4a71e01c9f4b57bb3",
      "parents": [
        "bbef36d3e5169836b3b520f6ce380f02b2a255b7"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Wed Sep 25 13:03:25 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Sep 30 19:15:01 2024 +0000"
      },
      "message": "internal/govulncheck: add sbom message type\n\nAdds a minimal SBOM message to govulncheck output. This message contains\ninformation about the code that govulncheck is scanning, like the go\nversion used for the standard library, modules and their version, and\nthe root packages gathered from the user inputted package patterns.\n\nChange-Id: I5db597ffaaa654394faea8dda82e1f18c5f5975a\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/616061\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "bbef36d3e5169836b3b520f6ce380f02b2a255b7",
      "tree": "f827e610748abeb3f4730674a7befcff007ddd5b",
      "parents": [
        "bd80eaab95b9dfb8ed83e26d6816f2e0b2452aca"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Wed Sep 25 12:56:27 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Wed Sep 25 18:08:52 2024 +0000"
      },
      "message": "internal/openvex: refactor PURL\n\nThis changes the internal representation of a PURL to a struct that is\nconverted to a string. It will make other \"purlFromX\" functions less\nredundant to write in the future.\n\nChange-Id: I278f13ef175878c85b07341be510050f8d7f2c5d\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/615795\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "bd80eaab95b9dfb8ed83e26d6816f2e0b2452aca",
      "tree": "8f07b7a849b9b7d3e84baf6330fbde78f5a2dd1b",
      "parents": [
        "2e326d4dd58433dbb6c5f2e27ef8bc8479579c14"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jul 09 13:04:34 2024 -0500"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Wed Sep 25 18:08:46 2024 +0000"
      },
      "message": "internal/openvex: populate product subcomponents\n\nPopulates the \"subcomponent\" field of a outputted vex statement with the\nPURL to the vulnerable dependency.\n\nupdates golang/go#68152\n\nChange-Id: I9e7b9a6686744496b3409ee9d4d0f3d70917db45\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/598956\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "2e326d4dd58433dbb6c5f2e27ef8bc8479579c14",
      "tree": "6db0c9494f34ca787b3c4e3df875b9a9bd9f8280",
      "parents": [
        "39173892081a8614f56d165c34e7058db5a4c8e1"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Sep 19 18:12:29 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Sep 23 20:01:29 2024 +0000"
      },
      "message": "internal/scan: do not show stacks in traces mode for binaries\n\nThere are no stacks so the trace just contains the vulnerable symbol\nthat is anyhow communicated to the user.\n\nChange-Id: I8a8ebcf3864f91150449dafe812f474a4a59bda8\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/614456\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "39173892081a8614f56d165c34e7058db5a4c8e1",
      "tree": "5fcaaf4be87bdbcfd9f6cd3a922e62c9b350740d",
      "parents": [
        "6a6005b5785ccb41a363c0da9f72bd262df567d3"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Sep 18 14:51:04 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Sep 19 16:28:06 2024 +0000"
      },
      "message": "internal/scan: reorganize trace text layout in trace mode\n\nAs paths are relative, it is not immediately evident to what module\nsymbols belong to in traces mode. We hence reorganize things to make\nthat explicit while avoiding clutter.\n\nFixes golang/go#69490\n\nChange-Id: Ic43e22954cbe3ff0ac458f75ee3a07706295fb5d\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/614135\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "6a6005b5785ccb41a363c0da9f72bd262df567d3",
      "tree": "cc16d5937d3a9d346fb83ca3cf7330a2b0348283",
      "parents": [
        "1e9d87e82f26c1f04a3291c39b02914837e232c0"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Sep 09 15:51:57 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Mon Sep 09 16:15:04 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I483375b05b35cb8231c5b2250319efcf37b562af\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/611935\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n"
    },
    {
      "commit": "1e9d87e82f26c1f04a3291c39b02914837e232c0",
      "tree": "faca609fd4a62b4393d610f82882a4fa483566ff",
      "parents": [
        "ff56115f39f3c4f2fcb8b9218456dcb5383ac8bf"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Sep 05 15:21:53 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Sep 05 18:53:04 2024 +0000"
      },
      "message": "internal/vulncheck: remove use of ssautil.AllFunctions\n\nThis function was used to prune out the forward slice of functions\nstarting from roots. There weren\u0027t a lot of functions being pruned.\nMeasured on a few large projects, at most 0.08% of functions were\npruned. Keeping those functions is not expected to affect precision\nor performance. Calling VTA two times will very likely get rid of\nthese functions anyhow.\n\nUpdates golang/go#69231\n\nChange-Id: Id57f9697c5a5550b4d15fbeb88de30b8bee220da\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/611216\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Alan Donovan \u003cadonovan@google.com\u003e\n"
    },
    {
      "commit": "ff56115f39f3c4f2fcb8b9218456dcb5383ac8bf",
      "tree": "5160a9d6ed3555b5a54a5294f453370bf1a85a33",
      "parents": [
        "ffdef74cc44d7eb71931d8d414c478b966812488"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Aug 15 14:00:55 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Aug 22 13:44:43 2024 +0000"
      },
      "message": "cmd/govulncheck: update test file for main module vulnerabilities\n\nAs of https://go-review.git.corp.google.com/c/go/+/596035, go command\nadds a version for a Go binary, not always defaulting to devel. That\ncauses a devel test to fail at go tip builders. This CL adds an explicit\nbinary with devel version rather than the test building its own binary.\nOnce the new Go version with the above fix is released, we\u0027ll add\nanother test.\n\nChange-Id: I409d18c85a0fad9b424771bd330067ac987d4830\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/605855\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "ffdef74cc44d7eb71931d8d414c478b966812488",
      "tree": "f06e7a536aae64b629a0c3db249e356e3261c1d6",
      "parents": [
        "902ccc792c5a2bb2eba38fd71e1b02334c645f47"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Aug 06 18:52:26 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Aug 07 17:29:48 2024 +0000"
      },
      "message": "cmd/govulncheck: add docs on detecting main module vulns\n\nThis only applies to binaries.\n\nChange-Id: Ia499e823a08a1b039cba72d5c06b5f3b2cd2f942\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/603575\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "902ccc792c5a2bb2eba38fd71e1b02334c645f47",
      "tree": "cbeb03465d60c83908e87e7ecaa759d9317d547e",
      "parents": [
        "8579d869f8890e79cd4578c003badc724a440488"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Aug 06 20:01:20 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Aug 06 21:18:40 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: If3475f07a842219f225392d2d2985f07e69cee08\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/603595\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "8579d869f8890e79cd4578c003badc724a440488",
      "tree": "0de6bee91b0e8082290e3af7fb1792854d35ff40",
      "parents": [
        "03865b626d843bb4e34286addf7cf01d952743e4"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jul 16 13:47:27 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Jul 22 20:18:20 2024 +0000"
      },
      "message": "cmd/govulncheck: update unit tests\n\nPreviously, unit tests using the \"vuln\" module did not have a\nvulnerability that was imported but not called (a \"package-level\"\nvulnerability). This change modifies main.go in the vuln module to\ndirectly call a vulnerable function instead of using a function that\neventually was affected by multiple vulns.\n\nChange-Id: Ic77a9c8efe3fd6dd2a2e76c230b3c4f67421e2fc\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/599476\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "03865b626d843bb4e34286addf7cf01d952743e4",
      "tree": "aff9e3e35b65d10fd224af02b0aa0677c562d006",
      "parents": [
        "079fa4db505e978cb155e6e6a09f9f5e48a3021f"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 17 21:10:35 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jul 18 20:23:52 2024 +0000"
      },
      "message": "internal/vulncheck: properly check for main package vulns\n\nAnd add unit tests.\n\nChange-Id: I311af8467a97c70677955aef7c9bee5edacdde09\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/599195\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "079fa4db505e978cb155e6e6a09f9f5e48a3021f",
      "tree": "689521b2fc45d13b6b13d27712bfb5f4baa9509c",
      "parents": [
        "201ff88d636722e395930fe60d29469fddf3eb9c"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 16 18:51:39 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jul 18 20:19:10 2024 +0000"
      },
      "message": "internal/vulncheck: explicitly exclude devel from affected ranges\n\nFor now, \"(devel)\" should never be matched.\n\nChange-Id: Ia6b001caef1a1faf093b6757f3fb89d27e160bb2\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/598715\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "201ff88d636722e395930fe60d29469fddf3eb9c",
      "tree": "6aba4e31c5bd0a1ea2b67e472ed5f1cfcc40bfd3",
      "parents": [
        "0a7cb137c8980e6edc432a2ec017c9b74f996488"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 16 17:53:21 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jul 18 20:18:38 2024 +0000"
      },
      "message": "internal/vulncheck: consider main module when checking bin vulns\n\nTests will come later.\n\nChange-Id: I82b478dc2f7613b65308807475a7f0cd43681937\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/598675\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "0a7cb137c8980e6edc432a2ec017c9b74f996488",
      "tree": "a64dafed3951c6f99a45a77b113eb53732508b39",
      "parents": [
        "4ea4418106cea3bb2c9aa098527c924e9e1fbbb4"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 16 20:02:32 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Jul 17 16:42:03 2024 +0000"
      },
      "message": "internal/vulncheck: exclude dev go versions from ancient check\n\nWhen checking if a go version is ancient, exclude invalid go versions\nsuch as \"devel 12343....\" This are considered earlier than go1.18.\n\nChange-Id: Ifbd7bd2834284b8e7fd109ec34fa4a2b9c297e24\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/598716\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "4ea4418106cea3bb2c9aa098527c924e9e1fbbb4",
      "tree": "baba854a7f8c7a41c143fc10396d9d9f6c87a678",
      "parents": [
        "de0a0adbc1d357501a7f291978a9f8b87d15eb5a"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jul 16 12:30:16 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jul 16 17:36:44 2024 +0000"
      },
      "message": "internal/openvex: update handler test\n\nUpdates handler tests to have more accurate package paths.\nThis doesn\u0027t affect anything right now, but will be relevant for\nfuture features/testing.\n\nChange-Id: Ia72c749cdaf263d2a425f349f72630cda576b5f0\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/598593\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "de0a0adbc1d357501a7f291978a9f8b87d15eb5a",
      "tree": "7a4ab84dc13ab0cd8d9052108b21bf7defd758a6",
      "parents": [
        "1884dfae5d94f200377663e5be082dbe1d96b979"
      ],
      "author": {
        "name": "Russ Cox",
        "email": "rsc@golang.org",
        "time": "Tue Jul 16 11:35:26 2024 -0400"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jul 16 16:15:35 2024 +0000"
      },
      "message": "LICENSE: update per Google Legal\n\nVery minor tweaks:\n - Remove (c) pseudosymbol.\n - Remove \"All Rights Reserved.\"\n - Change \"Google Inc.\" (no longer exists) to \"Google LLC\".\n\n[git-generate]\necho \u0027\n,s/\\(c\\) //\n,s/ All rights reserved.//\n,s/Google Inc./Google LLC/\nw\nq\n\u0027 | sam -d LICENSE\n\nChange-Id: Ie92bd7efd420f65bea524a6998c3d4c4e81a7274\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/598615\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Lance Taylor \u003ciant@google.com\u003e\nAuto-Submit: Russ Cox \u003crsc@golang.org\u003e\n"
    },
    {
      "commit": "1884dfae5d94f200377663e5be082dbe1d96b979",
      "tree": "ce4fc029e847e83d5556996bba35c30c7a8df13e",
      "parents": [
        "d9ad5223849a23e412d4a6ac1f61ecfc94cab0d8"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 17:27:05 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jul 15 19:36:53 2024 +0000"
      },
      "message": "internal/vulncheck: add warning message for ancient binaries\n\nWe emit a warning message for Go binaries built with an ancient Go\nversion.\n\nChange-Id: I9c7037cb1710181786a7c063ae2a253f880dc6ad\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/597516\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "d9ad5223849a23e412d4a6ac1f61ecfc94cab0d8",
      "tree": "61c88cd04411b98eb6b2776d35e648351f6726e3",
      "parents": [
        "44e45eaefb4e945ace34bc19e9a29cdb1b143966"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 17:53:51 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 19:47:43 2024 +0000"
      },
      "message": "all: remove build restrictions requiring go1.18\n\ngovulncheck\u0027s go.mod file explicitly requires go1.21 and it can analyze\nbinaries built before go1.18. There is no need to have these build\nrestrictions.\n\nChange-Id: I50a80da2490fd4bd8fb3d5b7a68f8796ff3ffe18\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/597575\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "44e45eaefb4e945ace34bc19e9a29cdb1b143966",
      "tree": "82cab6f4f8e8d65ce433c1ef2360d30d277023dc",
      "parents": [
        "601dd9b53b1c3d43f3065ea3b24d6a5fca69b1e1"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 14:51:54 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 17:48:11 2024 +0000"
      },
      "message": "cmd/govulncheck: clarify unsafe/reflection limitations\n\nThey only apply to source mode.\n\nChange-Id: I288adf8eac2075bb32b301b4ffe668f453352a77\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/597515\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "601dd9b53b1c3d43f3065ea3b24d6a5fca69b1e1",
      "tree": "d0e479a9f8958f87f2992f3f72d75030bc1a06a5",
      "parents": [
        "0f7005f3db72ac2c67d870609932dd49954db764"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 14:50:51 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jul 10 17:48:05 2024 +0000"
      },
      "message": "cmd/govulncheck: update docs for old Go binaries\n\nChange-Id: I16c0da875b6b4a0a8dbd5957238158fae3450521\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/597318\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "0f7005f3db72ac2c67d870609932dd49954db764",
      "tree": "2fd66fa9a0cfed17ce02d081eddb2e3cc8bf9872",
      "parents": [
        "f94421b20479af8851aa9ecc80a1142ad6f63c93"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jul 09 13:12:53 2024 -0500"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jul 09 20:20:14 2024 +0000"
      },
      "message": "internal/openvex: omit vulns with no findings\n\nThis change modifies govulncheck\u0027s VEX output to no longer include\nvulnerabilities that are not imported at a vulnerable version.\nThis matches the text output of govulncheck, and is in line with most\nother vulnerability scanners.\n\nupdates golang/go#68338\n\nChange-Id: If7041fd4624d023f623db8daf35a2e76f41d1d29\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/597396\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Mauri de Souza Meneguzzo \u003cmauri870@gmail.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "f94421b20479af8851aa9ecc80a1142ad6f63c93",
      "tree": "c3702be23ca64142c0c58b241f14c12ac40a8b74",
      "parents": [
        "684f5c9fa70708a9f79c33c09e16ce0bd25446d5"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 09 16:30:56 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jul 09 18:29:04 2024 +0000"
      },
      "message": "cmd/govulncheck/integration: adjust k8s expectations\n\nDue to a withdrawn containerd vuln.\n\nChange-Id: I5734ea3a4336be6550d557753b980953a7ece49b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/597315\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "684f5c9fa70708a9f79c33c09e16ce0bd25446d5",
      "tree": "1db29f4503fb33e08e1c9589c70bed7083afb9df",
      "parents": [
        "d52dedc621a782b20cbbf420a6e0358e80322300"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jun 27 15:10:53 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 09 15:22:22 2024 +0000"
      },
      "message": "all: remove skipIfShort\n\nWe don\u0027t have any tests using it.\n\nChange-Id: I72b24d505c0d9ec5cf9fce883bc04ed10f6bfd4f\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/595455\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "d52dedc621a782b20cbbf420a6e0358e80322300",
      "tree": "2145b6e7b1c7a0496d5ceeb68eee8ca0cca933ea",
      "parents": [
        "afa91f17c86b932508d1e74a7ebcb6b11a5fa6f8"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jun 27 15:09:05 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 09 15:22:15 2024 +0000"
      },
      "message": "all: remove unnecessary test lines for staticcheck\n\nChange-Id: I42cb6ac7a4bb9b50ad2e6bff2e89b93f1e382d4b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/595258\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "afa91f17c86b932508d1e74a7ebcb6b11a5fa6f8",
      "tree": "6fe9801593ad7268d09006cda6004f31e503e8e7",
      "parents": [
        "03a0c2f3be68ff4777928f4f81909596c806ad08"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 19:58:01 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jul 09 15:22:08 2024 +0000"
      },
      "message": "internal/vulncheck: avoid recomputing if module is known\n\nThis also makes the code cleaner.\n\nChange-Id: Ia59ed7dbf6487ee1ddcb67ffb05bd57668268e62\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/594217\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "03a0c2f3be68ff4777928f4f81909596c806ad08",
      "tree": "8cb15c9bf572cb73f55ae844c33bf6df22566c9e",
      "parents": [
        "675d16bf930e7ce7388d6e145d6b068907154562"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Sun Jul 07 20:31:23 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Sun Jul 07 23:36:59 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I9e76767f7dac4395908959032383f81e6f534a0a\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/596995\nReviewed-by: Than McIntosh \u003cthanm@google.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "675d16bf930e7ce7388d6e145d6b068907154562",
      "tree": "caee167069dd6785908c8295c541461acde4df04",
      "parents": [
        "cfe93e3f19114e66a1d6a0cac29dc712f329b7d7"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jun 27 18:19:26 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jul 01 18:56:00 2024 +0000"
      },
      "message": "internal/buildinfo: add support for ancient Go binaries\n\nAs a result, govulncheck will report only stdlib vulnerabilities.\n\nChange-Id: Ib9dd2445de41690b3e3122ad3789871b5d632441\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/595615\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "cfe93e3f19114e66a1d6a0cac29dc712f329b7d7",
      "tree": "8f71b990528c49370c1bffe740bfb6310ebb431d",
      "parents": [
        "d6cadf9010e6ec98244044e9e2c4c75beaba5432"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 25 20:50:53 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jul 01 18:55:39 2024 +0000"
      },
      "message": "internal/goversion: comment out a printing line\n\nChange-Id: I09e59759e8843d0a5150cf6a0df5e9d6afefe8e0\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/595016\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "d6cadf9010e6ec98244044e9e2c4c75beaba5432",
      "tree": "452816b9060f7baa9eb6c99403884eeff4478351",
      "parents": [
        "deda8bb439f9ae831819a48242ee4401e6642451"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 25 20:27:09 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jul 01 18:55:24 2024 +0000"
      },
      "message": "internal/goversion: add package as copy of rsc.io/goversion/version\n\nThis package will be mainly used to check ancient Go binaries.\n\nChange-Id: Ie0bd6b2c4fc0610941905c93cdb63ed7260b66ba\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/595015\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "deda8bb439f9ae831819a48242ee4401e6642451",
      "tree": "48da1c2f3f2aad075ebb70e4925ca32c08edc969",
      "parents": [
        "055425f86a5358f2235f7d4952ce069cf8c184e6"
      ],
      "author": {
        "name": "Sean Liao",
        "email": "sean@liao.dev",
        "time": "Mon Jul 01 11:45:52 2024 +0100"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jul 01 13:22:55 2024 +0000"
      },
      "message": "cmd/govulncheck: remove line about go version requirements\n\nUse the go directive in go.mod as the single source of truth\nfor the required Go version for installing golvulncheck.\n\nUpdates golang/go#68034\nFixes golang/go#68256\n\nChange-Id: Ief445ffa40282feff6a97419b48dc6290071d971\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/595935\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Than McIntosh \u003cthanm@google.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "055425f86a5358f2235f7d4952ce069cf8c184e6",
      "tree": "54288d094edca0c7d18a62c1f59a7db96c3a23eb",
      "parents": [
        "d44b651a2e0f43966413e20b65cb619bdb621e7e"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 21:23:08 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 25 14:24:45 2024 +0000"
      },
      "message": "internal/vulncheck: improve documentation\n\nAnd refactor some code.\n\nChange-Id: I658954d8670861cc36413c78c763cc2225716f15\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/594218\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "d44b651a2e0f43966413e20b65cb619bdb621e7e",
      "tree": "3065ad7cfdde0a0fd8b84b821a5c94c2a7caac17",
      "parents": [
        "dd23607213ac8e1730f735d4d2afe42ccaac519c"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jun 12 11:03:26 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 19:52:44 2024 +0000"
      },
      "message": "internal/vulncheck: use module info when looking for symbols\n\nWhen searching if (a symbol of a) package is vulnerable, we would try to\nidentify the module from package path. (The module information is needed\nbecause we save vulns per module.) This can cause problems when module\npaths are prefixes of each other. In all cases except binary mode, we\nknow the exact module of a symbol or a package, so we simply use that.\n\nChange-Id: I21c220e485522dda1bc1fe0a9025e73846b6fd6f\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/592135\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "dd23607213ac8e1730f735d4d2afe42ccaac519c",
      "tree": "40d734ae0dc66de0d30d12388a09777ac97173c4",
      "parents": [
        "dfbdf8164ca607b3fa7be562bb1205f59bc2a731"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 14:50:50 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 15:53:36 2024 +0000"
      },
      "message": "internal/vulncheck: handle symbols ending with .\n\nFor some binaries, a symbol can end in \".\", so this CL handles that\ncase.\n\nChange-Id: I7c3634eb9cc13ee4cd18d6787460e645dbbfdfae\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/594355\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "dfbdf8164ca607b3fa7be562bb1205f59bc2a731",
      "tree": "bba25c1b59b9501c4c0ca17f3d83cf5cb7d5f10d",
      "parents": [
        "f35edf848bf0f2b9cf411833c60f72cc49915487"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 17 19:05:56 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 15:52:52 2024 +0000"
      },
      "message": "cmd/govulncheck/integration: make expectation check more robust\n\nWhen checking test expectations (packages of called vulnerabilities), we\nwould use equality. Given that a requirement of integration checking is\nto query the Go vulnerability database, the expectations need to change\nfrom time to time. With the new support for UNREVIEWED, this is\nhappening more and more.\n\nTo address this, the CL here checks that the expected packages are a\nsubset of what is detected with govulncheck. This will make the test\nmore robust. The list of expected packages is anyhow long, so the\ncoverage is good and we are still testing against the same live db.\n\nChange-Id: I49f73dc2094686253ae222bbe92144f87b2637a5\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/593155\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "f35edf848bf0f2b9cf411833c60f72cc49915487",
      "tree": "b8f9c62753259c246f366362abc36c5774350da1",
      "parents": [
        "3740f5cb12a3f93b18dbe200c4bcb6256f8586e2"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 18 09:47:38 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 24 15:49:52 2024 +0000"
      },
      "message": "all: require go1.21\n\nOtherwise, code won\u0027t compile due to the use of slices package.\n\nFixes golang/go#68034\n\nChange-Id: Id6fb27d2f213e5a665a2bcd6d07b15f80702975b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/593235\nReviewed-by: Mauri de Souza Meneguzzo \u003cmauri870@gmail.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\n"
    },
    {
      "commit": "3740f5cb12a3f93b18dbe200c4bcb6256f8586e2",
      "tree": "73e06b1ed297bb017d8c1b591786388dc20da055",
      "parents": [
        "29462d73a2bf15636e29dc1e570ea0caa38dd5d5"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jun 06 13:39:21 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu Jun 06 14:46:51 2024 +0000"
      },
      "message": "internal/osv: add review status\n\nEcosystem metrics cannot pick up REVIEWED vs UNREVIWED unless\ngovulncheck produces it.\n\nChange-Id: Ia6ea1ef7cf681ac51e18dd32748dc658a72ebad9\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/591055\nReviewed-by: Tatiana Bradley \u003ctatianabradley@google.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "29462d73a2bf15636e29dc1e570ea0caa38dd5d5",
      "tree": "b362297ffbde7a56387bace3cf51979a04fd8f40",
      "parents": [
        "2736e1dc19ec039536007b7b7ab2cf1bd93052f6"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Tue Jun 04 16:33:16 2024 -0400"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Wed Jun 05 20:35:58 2024 +0000"
      },
      "message": "vulncheck: update documentation for vex\n\nAdds documentation/updates some tests \u0026 comments to reflect the\nintroduction of the openVEX standard as a valid output format for\ngovulncheck.\n\nfixes golang/go#62486\n\nChange-Id: I88c6fc830439606441bb1855ba8b36642007738c\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/590575\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nCommit-Queue: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "2736e1dc19ec039536007b7b7ab2cf1bd93052f6",
      "tree": "c57fe75bfe456428923a4f7be3f8f5603e0c894a",
      "parents": [
        "65c6e2bf78af59b4e3eeb15616d10d2d93976c30"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jun 05 18:11:26 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Jun 05 19:01:16 2024 +0000"
      },
      "message": "cmd/govulncheck/integration/stackrox-scanner: update expectations\n\nDue to a new addition of unreviewed reports.\n\nChange-Id: I4bbecf7bb600944cdec0fe61fce13372e6450f00\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/590636\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "65c6e2bf78af59b4e3eeb15616d10d2d93976c30",
      "tree": "4a4f5c6cdd1a4a234f24c13b69f296c304e86580",
      "parents": [
        "03e66a609a8e11ea10203ac2bb74977292163cf5"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 04 20:21:58 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Wed Jun 05 17:05:46 2024 +0000"
      },
      "message": "cmd/govulncheck/integration/k8s: update expectations\n\nDue to new entries in the db.\n\nChange-Id: I911bd9308fbae679a9c210e7a5f950a022087b65\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/590555\nAuto-Submit: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "03e66a609a8e11ea10203ac2bb74977292163cf5",
      "tree": "a272bf9098e0866a6fa4c98a3e23745f18a5d58d",
      "parents": [
        "f30059cfb245502cc453bb54905db2f0b77492ef"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 04 20:09:42 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed Jun 05 13:32:55 2024 +0000"
      },
      "message": "internal/govulncheck: add more comments for emitted OSVs\n\nChange-Id: I268971d26368476c4eda5da032fdf56e5698042f\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/590515\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "f30059cfb245502cc453bb54905db2f0b77492ef",
      "tree": "8bcbdad1cc8d6439964f00ad57d5c67f39799bb4",
      "parents": [
        "84735a3ac315d2ef79d1f31d1298d6b8dc9a9a8d"
      ],
      "author": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jun 04 18:46:46 2024 +0000"
      },
      "committer": {
        "name": "Gopher Robot",
        "email": "gobot@golang.org",
        "time": "Tue Jun 04 20:21:02 2024 +0000"
      },
      "message": "go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I4f364eef1535c02c9fe5c84e199eb45d823e3e29\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/590456\nReviewed-by: Than McIntosh \u003cthanm@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Dmitri Shuralyov \u003cdmitshur@google.com\u003e\n"
    },
    {
      "commit": "84735a3ac315d2ef79d1f31d1298d6b8dc9a9a8d",
      "tree": "b9778671ca3bd2fed48299ba21444cd92964b26b",
      "parents": [
        "fb2a687c05601167d07f68c59e685fc7371bc176"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu May 30 17:14:35 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 04 18:32:20 2024 +0000"
      },
      "message": "internal/scan: increase telemetry counter for show flag\n\nChange-Id: I9bb24cb7943f8a6abd8a4c7128bfc1560b97f466\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/589415\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\n"
    },
    {
      "commit": "fb2a687c05601167d07f68c59e685fc7371bc176",
      "tree": "ef3679241f0f33bea3540c618ab9adc300f311bb",
      "parents": [
        "f5e77b81ae7d803dfe37b80b919ebe9269cc0141"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu May 30 16:54:03 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 04 18:31:11 2024 +0000"
      },
      "message": "internal/scan: add format and scan level telemetry\n\nChange-Id: I9564ea12001d0ae4c173e051394dee3c12f459f1\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/589395\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "f5e77b81ae7d803dfe37b80b919ebe9269cc0141",
      "tree": "0e0f067a49749eb5aff119c25438c43ec9bf6071",
      "parents": [
        "1201340bf0daba4b0f59a0118ecd04144ad1ffa6"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 03 18:53:53 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 04 15:12:09 2024 +0000"
      },
      "message": "internal/cmd/govulncheck: remove unnecessary binary dependency\n\nThis is simply not needed anymore.\n\nChange-Id: I02cf1459f060ce8522655107c641e7c3f972e231\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/590015\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "1201340bf0daba4b0f59a0118ecd04144ad1ffa6",
      "tree": "11b578dff9558948cd60c477031e2bea1100a4e0",
      "parents": [
        "ce0605bc84d98f89385c54ce5b0712dfb1f7e0b6"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 03 16:51:46 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue Jun 04 15:11:59 2024 +0000"
      },
      "message": "cmd/govulncheck/integration: update go in integration tests\n\nChange-Id: Ie85bcb40d8277b9e91bf08fe2b5d126350f4b76b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/589915\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "ce0605bc84d98f89385c54ce5b0712dfb1f7e0b6",
      "tree": "c0c22488e6326c9cfb614eaf403566b8945158f1",
      "parents": [
        "745db65f35062023c5994fceb1931ef839777007"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Fri Mar 22 12:06:58 2024 -0600"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Jun 03 16:25:45 2024 +0000"
      },
      "message": "internal/openvex: add hash for doc ID\n\nupdates golang/go#62486\n\nChange-Id: I741ee275288b978becb46d5072ae22857152f2b6\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/575860\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "745db65f35062023c5994fceb1931ef839777007",
      "tree": "5d21be1b89b4a9d6f962e54861988e1cf567a89f",
      "parents": [
        "ad5a6f82ec98d81af81c6c4ca5aa64a44d0959f4"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Fri Mar 22 11:55:08 2024 -0600"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Jun 03 16:25:36 2024 +0000"
      },
      "message": "internal/openvex: add statements to handler\n\nChange-Id: I1b1b7c9dff24fab589d83c38f1dd0dab4f5322d6\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/575859\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "ad5a6f82ec98d81af81c6c4ca5aa64a44d0959f4",
      "tree": "ec1d88aab6f1b7bed555f35e01cd0957f88f69a5",
      "parents": [
        "b6af8187a6daad754999d0867c631c76dd52cfb8"
      ],
      "author": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Fri Mar 22 11:35:41 2024 -0600"
      },
      "committer": {
        "name": "Maceo Thompson",
        "email": "maceothompson@google.com",
        "time": "Mon Jun 03 16:25:26 2024 +0000"
      },
      "message": "internal/openvex: add handler\n\nupdates golang/go#62486\n\nChange-Id: Ib1cd9281cf33fb84a8a3c0f3e7523cfb8d93e677\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/575858\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "b6af8187a6daad754999d0867c631c76dd52cfb8",
      "tree": "1f8d76d6564c543d8a726d3711cf314b0b5881e7",
      "parents": [
        "c68e251f9d2951481189878b0cdd4aafe03683be"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed May 29 20:42:34 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 03 16:06:25 2024 +0000"
      },
      "message": "all: remove test that runs govulncheck on govulncheck\n\nThe only interesting vulnerabilities this test can find are stdlib ones.\nWe cannot really do much about those. On the other hand, whoever is\ndeveloping this module on a go version that is not the latest patch or\ntop will see a failure. This is annoying so we remove the test.\n\nChange-Id: I3236393354565eb9d682075948330b0612434606\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/589235\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "c68e251f9d2951481189878b0cdd4aafe03683be",
      "tree": "da645d2f6764d601ce668fb46686f1921328fa48",
      "parents": [
        "9c23f018709359982e29af8eaa693f0f4f6b80e5"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu May 30 17:48:48 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Jun 03 15:57:10 2024 +0000"
      },
      "message": "internal/sarif: fix a typo\n\nChange-Id: I19ebf57adbd63e65a0eca160bcc06e91b76b5f6e\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/589435\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "9c23f018709359982e29af8eaa693f0f4f6b80e5",
      "tree": "567645b9983954e73f4c6f9ac9e37427fcceb842",
      "parents": [
        "c6f848552abbf1b592d566d225e207ed20cf2bc2"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Thu May 23 20:31:09 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed May 29 16:23:10 2024 +0000"
      },
      "message": "internal/scan: limit number of binary traces shown\n\nTraces, e.g., symbols in binary mode are not as useful as they are in the\nsource mode. Users cannot directly act on the binary using this info.\nGiven potential future reports for vulnerabilities in the main module of\nbinaries, which won\u0027t have symbol info, and current precision levels for\nstripped binaries, there can be many traces shown. This can spam the\nuser without providing really useful information.\n\nWe hence limit the number of traces shown and provide annotation\ninstructing users on how to retrieve the remaining traces.\n\nChange-Id: Ib58b6d29df8a7b9cce5e16173db036f0183f2b85\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/587996\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Maceo Thompson \u003cmaceothompson@google.com\u003e\n"
    },
    {
      "commit": "c6f848552abbf1b592d566d225e207ed20cf2bc2",
      "tree": "995deb8fa1e895c20eb25e00a547b6584cd2098b",
      "parents": [
        "486fd2384a39a632a0e5b003e1840d49d1db7e86"
      ],
      "author": {
        "name": "Hana (Hyang-Ah) Kim",
        "email": "hyangah@gmail.com",
        "time": "Fri May 24 13:42:14 2024 -0400"
      },
      "committer": {
        "name": "Hyang-Ah Hana Kim",
        "email": "hyangah@gmail.com",
        "time": "Fri May 24 19:44:33 2024 +0000"
      },
      "message": "cmd/govulncheck: record scan mode telemetry\n\nAdd the new `govulncheck/mode:{source,binary,convert,query,extract}` counter,\nand collect the crash report `crash/crash`.\n\nChange-Id: I53dfa5640bc38ae2a0d55302a3bd637c57a984e9\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/588255\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "486fd2384a39a632a0e5b003e1840d49d1db7e86",
      "tree": "4fa008a12dcee0a4af47933508508b1a646cdc03",
      "parents": [
        "6b0fd5601b4a69285e464ec05957800bf63e4d0e"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue May 21 21:06:58 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue May 21 21:23:08 2024 +0000"
      },
      "message": "all: remove unit tests for staticcheck, unparam, and spellcheck\n\nThose should not be unit tests and, more importantly, they should not be\nrunning on builders.\n\nChange-Id: I70504fedce3bad17ac408dc6f208d61fb7bd6071\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/587097\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n"
    },
    {
      "commit": "6b0fd5601b4a69285e464ec05957800bf63e4d0e",
      "tree": "3194df0cd993f769fdb7347273e6ce29bdc4cec5",
      "parents": [
        "7b455eea68df4fad0d78f08d7811f818426afc30"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Mon Apr 22 21:57:18 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue May 21 21:02:10 2024 +0000"
      },
      "message": "internal/sarif,cmd/govulncheck: publicize sarif\n\nAlso, add and improve documentation.\n\nFixes golang/go#61347\n\nChange-Id: Ia631615b40b9d23be6efa615b573be6c465fa36b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580955\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\n"
    },
    {
      "commit": "7b455eea68df4fad0d78f08d7811f818426afc30",
      "tree": "2492475ec5652e4eac8d057e4151cbb2423c600e",
      "parents": [
        "7ed0faae83da959585ab1226aedda8b2e1eff849"
      ],
      "author": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Tue May 14 14:19:43 2024 +0000"
      },
      "committer": {
        "name": "Zvonimir Pavlinovic",
        "email": "zpavlinovic@google.com",
        "time": "Wed May 15 19:10:38 2024 +0000"
      },
      "message": "internal/vulncheck: load source code for scan symbol mode only\n\nFor package and module scan mode, loading code is not needed and it just\ntakes longer. With this CL, the loading for these mode drops down by\n~40%.\n\nChange-Id: Ibdaa98c50e3e90ba1696d8b9706589ff4c279e17\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/585335\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Ian Cottrell \u003ciancottrell@google.com\u003e\nRun-TryBot: Zvonimir Pavlinovic \u003czpavlinovic@google.com\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\n"
    }
  ],
  "next": "7ed0faae83da959585ab1226aedda8b2e1eff849"
}