tree 109f32fb91f12d0c150837dc918b08cd44704818
parent 766e59ff3a48ace7e31a72d646e97e8ee8d8ecc8
author Tim King <taking@google.com> 1675117552 -0800
committer Tim King <taking@google.com> 1675287554 +0000

internal/report: adds SkipFix field to Package

New SkipFix field on report.Package indicates that a package
should not be automatically updated by vulnreport fix.

vulnreport fix now automatically adds a todo message if this
field and Module.VulnerableAt are both empty.

Lint rules will come later.

Change-Id: I574539362cf334cdc9fee59f036e1de8e5b5bd6e
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464016
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>