On Tue, Apr 21, 2020 at 4:41 PM Pirate Praveen <prav...@onenetbeyond.org> wrote: [...] > >Following packages may have patch to use github.com/dgrijalva/jwt-go-v3 > >import path. > > > ># https://codesearch.debian.net/search?q=jwt-go-v3&literal=1&perpkg=1
Seems this causes a lot of false positives. https://codesearch.debian.net/search?q=github.com%2Fdgrijalva%2Fjwt-go-v3&literal=1&perpkg=1 shows only 4 packages. golang-github-labstack-echo.v2 influxdb golang-github-go-kit-kit golang-github-labstack-echo.v3 > >influxdb > >golang-github-go-kit-kit > >go-cve-dictionary > >kubernetes > >docker.io > >golang-github-dgrijalva-jwt-go > >vuls > >goval-dictionary > >gitlab-workhorse > > I will take care of gitlab-workhorse. -- Shengjing Zhu