tree 414e0a384854152ab0d59495ebd42dd4e5106b3f
parent f485fa0ca603efc289d34710a387055d0405fa82
author Damien Neil <dneil@google.com> 1656624149 -0700
committer Damien Neil <dneil@google.com> 1656690240 +0000

internal/report: refine lint checks for stdlib links

Permit the commit link for a standard library report to reference
any go.googlesource.com repo, allowing us to record a link to the
original fix for packages vendored into the stdlib.

Make the commit field optional. The pr and commit fields are
for informational purposes. It's sufficient to link to the
Gerrit CL; anyone who wants the specific commit can easily
get to it from there.

Improve fix while I'm in here to drop the redundant package
when package==module. (Lint checks for it, fix can fix it.)

Change-Id: I68473c674b82535da52a793b57343bd48fd5acf4
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/415535
Reviewed-by: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>