internal/worker: use function Aliases instead of x/vuln client

To remove the dependency on the now unsupported x/vuln client, clone
the vulndb repo and call Aliases to find all aliases. This is actually
an improvement, as the worker will now take into account excluded aliases
when determining if something is a duplicate.

With this change, we have now completely removed the dependency of this
repo on x/vuln.

Fixes golang/go#60116

Change-Id: I12a837745d4eb2cc62cdb44522a52e2d016b4b6c
TryBot-Result: Gopher Robot <>
Reviewed-by: Damien Neil <>
Run-TryBot: Tatiana Bradley <>
3 files changed
tree: 3c90d8ae7d31d4af3fbd36b60caa4d3d91011c47
  1. .github/
  2. cmd/
  3. data/
  4. deploy/
  5. devtools/
  6. doc/
  7. internal/
  8. terraform/
  9. webconfig/
  10. .gitignore
  11. all_test.go
  12. checks.bash
  14. go.mod
  15. go.sum
  19. tools_test.go

The Go Vulnerability Database

Go Reference

This repository contains the infrastructure and internal reports to create the Go Vulnerability Database.

Check out for more information about the Go vulnerability management system.

Reporting a vulnerability or feedback

Click here to report a public vulnerability in the Go ecosystem, or give feedback about the project.

Privacy Policy

The privacy policy for govulncheck can be found at


Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries are distributed under the terms of the CC-BY-4.0 license. See for information on how to access these entries.