Lucas Raab wrote (2023-05-21 05:46 CEST):
> Here's a quick update to 1.3.3, runs fine
OK sdk@
> changelog:
> Fixes:
> Bug #369 Fix requirements.txt misparsing lines that contain --hash
> Bug #237 Clarify when no vulnerabilities are found
> Bug #354 Fix cycle in requirements.txt causing infinite recursion
> Bug #367 Fix panic when parsing empty lockfile
>
> API Features
> Feature #357 Update pkg/osv to allow overriding the http client / transport
>
> Thanks,
> Lucas
> diff refs/heads/master refs/heads/osv-scanner
> commit - f381dcdca76d90f4031515d36be712c61299e96f
> commit + 6323aa5feeab6c61f06bbc3dd37c74ed22d9633d
> blob - b1d8bf866628d68282b8fa0ac39fc5e345c3f23b
> blob + a46631c8f3102603e93a61f9857d8b8ad7899411
> --- security/osv-scanner/Makefile
> +++ security/osv-scanner/Makefile
> @@ -6,7 +6,7 @@ V = 1.3.2
>
> COMMENT = scan your project's dependencies for vulnerabilities
>
> -V = 1.3.2
> +V = 1.3.3
> MODGO_MODNAME = github.com/google/osv-scanner
> MODGO_VERSION = v${V}
>
> blob - 11a0fd580b104397e581c21a593d72324be4b34b
> blob + f8641c8b2f4cc3195ea99c403e16f4ca21b2938c
> --- security/osv-scanner/distinfo
> +++ security/osv-scanner/distinfo
> @@ -9,6 +9,8 @@ SHA256 (go_modules/github.com/anmitsu/go-shlex/@v/v0.0
> SHA256
> (go_modules/github.com/!proton!mail/go-crypto/@v/v0.0.0-20230217124315-7d5c6f04bbb8.zip)
> = QwUH/oqnnj2zdodYBPMSbvCZZdheyYaRH5jQmXUU4Tc=
> SHA256 (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.mod) =
> Iaxsw323lcL/h53Hl9IqRY/0F1um/IBgrFx8/DYOoWw=
> SHA256 (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.zip) =
> Oj1OO/HH5GpaEMpDGEcx1fFnEgE6YoMIfzYy9xw/P8U=
> +SHA256
> (go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.mod)
> = WggzYMJ2oV0NvIKxftIioKjw0UBjFCKw6YbWdrPy93k=
> +SHA256
> (go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.zip)
> = Ocmj9VeqVIbAhoGmJoWLydfDM6809s4iFC+xV4KNAPE=
> SHA256
> (go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.mod)
> = YFvwqg2YIjVA9dr3+pcJHq+79ImJx9F2Uq+ZLKdkr7Y=
> SHA256
> (go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.zip)
> = Klz3yaJwn2Sf1QjLrLK+luT7pNU0oooSLuTXV0r0C14=
> SHA256
> (go_modules/github.com/armon/go-socks5/@v/v0.0.0-20160902184237-e75332964ef5.mod)
> = eH9fmKshF09xFkyrjuplEl5gqnL111F+EuCOe47szNI=
> @@ -16,11 +18,13 @@ SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v
> SHA256 (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.mod) =
> Irw2AV+FCyXe73ShEsNARxdI76cC9taJWn6pcIumIZM=
> SHA256 (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.zip) =
> +nOEG0auVcwJj3c5M4gl5XREHETrknHSzqt1rMDbPtc=
> SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.mod) =
> NorKF1e+h0XM47kN60Aee+V0CWPKU1nEqVTMA1AtjwM=
> -SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.zip) =
> RZ6byrTT29I8JWJebDwSHZzBjz9oPhO7YXQA9offe3I=
> +SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.mod) =
> NorKF1e+h0XM47kN60Aee+V0CWPKU1nEqVTMA1AtjwM=
> +SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.zip) =
> ToAJtAKuZJbmazogNwAtwS8abq0JAOchM5D7er/AOUw=
> SHA256 (go_modules/github.com/client9/misspell/@v/v0.3.4.mod) =
> 0bw2Ld3Zb7OkPtS5Kqq3CqbH71pQDX8JVk4+skq88Lg=
> SHA256 (go_modules/github.com/client9/misspell/@v/v0.3.4.zip) =
> o68gY3LhMd0QporEcMZqGxjq9Rxq+stVsuKgbjm5Byg=
> SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.1.0.mod) =
> HbnQ8RL5ropyoGhB9PGR01RcFExuBe082BYBiliCKBo=
> -SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.1.0.zip) =
> vGIgcUMzpWYndEC0f6KpArlTR2nbVvhPvHGuKZLfF5o=
> +SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.mod) =
> aLEuRmK7BjlyhJAVP/xS2L3WO+VYvdQbyw2PHu6wPkE=
> +SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) =
> XhGMBQbVxujLM33jULSE2jRUQIXNpV0xFKPm9DJSjfQ=
> SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) =
> FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro=
> SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) =
> cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I=
> SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) =
> 6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE=
> @@ -43,7 +47,6 @@ SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.7.
> SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.6.1.zip) =
> IK23A5GiSiadaVfoyqwdVUUl9GFyzL91vPOlGXFPi/U=
> SHA256
> (go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.mod)
> = YBCCwe/4ls1GJ8PCPRVrWD+85CRh5UhHNLZGe5ZOtk0=
> SHA256
> (go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.zip)
> = 4HEz61u+FEJsMN3UCV7i91TREi2XN28NVlyNqGMOhBw=
> -SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.7.mod) =
> e1G+1TTzn2zfY8noFgqsIOf6SUl52PWprel0NH+JvjY=
> SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) =
> 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
> SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) =
> 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
> SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) =
> MkUIdKx1bvXUf2uBkwUQUwS5gZBFoW4/EFKJt88lLFE=
> @@ -103,20 +106,22 @@ SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.
> SHA256
> (go_modules/github.com/spdx/gordf/@v/v0.0.0-20201111095634-7098f93598fb.mod)
> = eKUongYQUXmwBVYtvFiYMNLnHrFgrEUV5RiQ5fFMgYk=
> SHA256
> (go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.mod)
> = eKUongYQUXmwBVYtvFiYMNLnHrFgrEUV5RiQ5fFMgYk=
> SHA256
> (go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.zip)
> = XxsMQLKthYlrDa14n8WZRd/FR93bivyiABl27UQYdtw=
> -SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.mod) =
> 5qaoCe6yydD6uyr0KaDkuGJZYn/KsmDSn+eZvnJnY98=
> -SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.zip) =
> Ao9d8f/ZWvvV66u+4lpTxlaPiYqQslkvvySIQJ9vmQY=
> +SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.mod) =
> tR5GhaF8VbvoWEjeG1jC7pk/tJXu/mwPDhaqcre1jJU=
> +SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.zip) =
> gNdugKIUNOM8/AMAfTd8rTKjXhuecVb8zk/scQjCdo8=
> SHA256 (go_modules/github.com/stretchr/objx/@v/v0.1.0.mod) =
> E1A1TVLSKHpiM27MDVYjLUxHaZr5u6ScZ8K0glTamPE=
> SHA256 (go_modules/github.com/stretchr/objx/@v/v0.4.0.mod) =
> MbL9ze6HDw9hv/r6+5YiCWflvKCKdqkg1XQhb8H5E1U=
> -SHA256 (go_modules/github.com/stretchr/objx/@v/v0.4.0.zip) =
> +1x0NztDheV+kAsqnd7Huh7aLA2T+rTTB8FQl9yqB2U=
> +SHA256 (go_modules/github.com/stretchr/objx/@v/v0.5.0.mod) =
> yzJlQO/LEnSm5Olw1/yd4ugGLwigWPwpbYWQJeYugHo=
> +SHA256 (go_modules/github.com/stretchr/objx/@v/v0.5.0.zip) =
> GgCzu1rUHLcmNKzga36334V0BNd6fKtOQBp8cpVh/kw=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.2.2.mod) =
> SrRj9ow3AEH5UMEMq1EEkD1FmMUM+CT5qtG3t/aSVa8=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.4.0.mod) =
> awx7cQMNT8VdTm5uJMC/wCViE0H3YUHjrsAETEzomVA=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.7.0.mod) =
> //gWjZjmoHFWxFShtuklUJ8xd+lsFVUW1/lrQHnMo78=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.7.1.mod) =
> //gWjZjmoHFWxFShtuklUJ8xd+lsFVUW1/lrQHnMo78=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.7.4.mod) =
> 4HYHTBVgrR3amLiwD+pjCMS2zNBt3QiNIttGJu1o9zg=
> +SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.0.mod) =
> 4HYHTBVgrR3amLiwD+pjCMS2zNBt3QiNIttGJu1o9zg=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.2.mod) =
> rxpdyzMazno/n8G11+7pwLyCtKKhgv5M7CrdIX4oU9Y=
> SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.2.zip) =
> QA4YyI5cS+t+zKXWdQSPGRWm5nWzD8A/j1Y+tN/eB5o=
> -SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.mod) =
> vrUO54Wf55rTJgt1onaRXPZpTqf1UBuI9VD4q7RpqU0=
> -SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.zip) =
> d5/dY9wkYIfvvdsK7Sk1G1dkImunUYHL/FbpFqqHKbE=
> +SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.mod) =
> vrUO54Wf55rTJgt1onaRXPZpTqf1UBuI9VD4q7RpqU0=
> +SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.zip) =
> P3K/P8ZABjgDSxzMJo8SaIlujKa9w2ePu6XBrEve4zs=
> SHA256 (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.mod) =
> HOHMUJiJtzjB9j2/zFrVIs62MnLZ3v9u73SZ7TAaoSU=
> SHA256 (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.zip) =
> GahsJiOyDMmGh73diePwI9sMpRyLyeOLmtnFblt9EQ0=
> SHA256
> (go_modules/github.com/xrash/smetrics/@v/v0.0.0-20201216005158-039620a65673.mod)
> = Kz9hJyfgYrwlZDq5c5S7f0F6KXqf9lIqDxjs93h38EI=
> @@ -131,11 +136,12 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.6.0.mod)
> SHA256
> (go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) =
> ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s=
> SHA256
> (go_modules/golang.org/x/crypto/@v/v0.0.0-20220826181053-bd7e27e6170d.mod) =
> ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s=
> SHA256 (go_modules/golang.org/x/crypto/@v/v0.1.0.mod) =
> UyMpuLIbGJweFmNIgx2ltu2Mx8mCUJOmvjEM7M0m6MI=
> +SHA256
> (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod)
> = t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk=
> SHA256 (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) =
> G2poNFWjuIK2rFPyJ1KWDoe9kQQKlNbyxcthJh4jidg=
> SHA256 (go_modules/golang.org/x/crypto/@v/v0.6.0.zip) =
> gcqIrzcc/1qERCuijiPY9CzME4fI/hUuVeh7pK+eGsc=
> SHA256
> (go_modules/golang.org/x/exp/@v/v0.0.0-20220722155223-a9213eeb770e.mod) =
> KqbbzGUyHHFTSmOE7NZqsrIERkRKV3BwZjFFGY3Rnas=
> -SHA256
> (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.mod) =
> EF8h/6AuHlv/paPw/lAoL4JDRLRXLLlG+MRWK0JUfWc=
> -SHA256
> (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.zip) =
> l2l6s6PrECfDZqqkQeaYlu2vRKKRl6DkSy56o/FwrCE=
> +SHA256
> (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.mod) =
> EF8h/6AuHlv/paPw/lAoL4JDRLRXLLlG+MRWK0JUfWc=
> +SHA256
> (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.zip) =
> qRcbJSFlXiJAq74zCew5lV8aStp9dBe2TvqLx4hbGqY=
> SHA256 (go_modules/golang.org/x/mod/@v/v0.10.0.mod) =
> YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
> SHA256 (go_modules/golang.org/x/mod/@v/v0.10.0.zip) =
> +HZHOsJ/HG47D/+XHIT7689nDbCz6PKB4DFJ/PY2/iU=
> SHA256
> (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod)
> = QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM=
> @@ -147,14 +153,15 @@ SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) = Q
> SHA256
> (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) =
> sxXFJkfS2i925c2502fh1nJ3hCNqm/+2EhkrGbEKEo0=
> SHA256
> (go_modules/golang.org/x/net/@v/v0.0.0-20220826154423-83b083e8dc8b.mod) =
> RchlScbaiI0Gy5B2u6/uyZ9PtWwlnLbilO0+gEM9vKA=
> SHA256 (go_modules/golang.org/x/net/@v/v0.1.0.mod) =
> bMULjKFlQRqqkeV/MJpPT0TkMAPb2vIiAicYcfdCids=
> +SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.mod) =
> 07fiNv8J5jIr5IkXAhbgGNMiGGLxoFPctj5T6rhTPBc=
> +SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.zip) =
> +S+bJlUiam0BWvenYnmhH7VWeOQQuFGxWPyEZUb4BzM=
> SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) =
> Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs=
> SHA256 (go_modules/golang.org/x/net/@v/v0.7.0.mod) =
> Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs=
> -SHA256 (go_modules/golang.org/x/net/@v/v0.9.0.mod) =
> xdaFHt5Q7BwAGvt2MEAZS2iWG/Bpl+JgXovwbc0q6y4=
> -SHA256 (go_modules/golang.org/x/net/@v/v0.9.0.zip) =
> yNPLFl0LK29b5ka2KLulsXZ4HSbpK9T8ss3nV+EacvA=
> SHA256
> (go_modules/golang.org/x/sync/@v/v0.0.0-20190423024810-112230192c58.mod) =
> Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
> SHA256
> (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) =
> Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
> SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.mod) =
> Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
> -SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.zip) =
> 9RC+xgCeGYgtGZU+cnMTfTTfhsZZSTRdcvEjolXC7NI=
> +SHA256 (go_modules/golang.org/x/sync/@v/v0.2.0.mod) =
> Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
> +SHA256 (go_modules/golang.org/x/sync/@v/v0.2.0.zip) =
> 7g30Vy3XNmV2eWT/gJsS8NQeOgdAIg1E1BihmYmgNjs=
> SHA256
> (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) =
> iWkRXko5EIhIMk55ob2KhEUjDm46rMvp+AV/tQ//yME=
> SHA256
> (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) =
> GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
> SHA256
> (go_modules/golang.org/x/sys/@v/v0.0.0-20200302150141-5c8b2ff67527.mod) =
> GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
> @@ -172,15 +179,15 @@ SHA256 (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 8
> SHA256 (go_modules/golang.org/x/sys/@v/v0.1.0.mod) =
> 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
> SHA256 (go_modules/golang.org/x/sys/@v/v0.3.0.mod) =
> 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
> SHA256 (go_modules/golang.org/x/sys/@v/v0.5.0.mod) =
> 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
> -SHA256 (go_modules/golang.org/x/sys/@v/v0.7.0.mod) =
> 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
> -SHA256 (go_modules/golang.org/x/sys/@v/v0.7.0.zip) =
> 5iBUFFbnJTSTQWIbLaqgPjRwzn7dNMLlfGuj/gNt7/Y=
> +SHA256 (go_modules/golang.org/x/sys/@v/v0.8.0.mod) =
> 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
> +SHA256 (go_modules/golang.org/x/sys/@v/v0.8.0.zip) =
> JYizpkWDg5DjQfEAf4Z59eERe11ayUZ++DLRSLIhmjg=
> SHA256
> (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) =
> TLqxT3cGdxsnHZlaGzzBMf5aJGqtx+5tG6bwvYlHgfo=
> SHA256
> (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) =
> dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
> SHA256
> (go_modules/golang.org/x/term/@v/v0.0.0-20220722155259-a9ba230a4035.mod) =
> dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
> SHA256 (go_modules/golang.org/x/term/@v/v0.1.0.mod) =
> dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
> SHA256 (go_modules/golang.org/x/term/@v/v0.5.0.mod) =
> DW9YIoqtwaZSjmdV2gGFFlZuOuXFIB963hdz9W+o2TQ=
> -SHA256 (go_modules/golang.org/x/term/@v/v0.7.0.mod) =
> RsDxQ/3tcWQnE3P7XJr/a2bC0r7iyhjANT6qnUqJxKI=
> -SHA256 (go_modules/golang.org/x/term/@v/v0.7.0.zip) =
> 9UiGeSoJI5e1FObXmj/D6SahpUC04VARWZXZZnp6RuQ=
> +SHA256 (go_modules/golang.org/x/term/@v/v0.8.0.mod) =
> XTYtaoNFP3Akcl6CTAXFlJYk749MsT9dfj1Lfxygsyc=
> +SHA256 (go_modules/golang.org/x/term/@v/v0.8.0.zip) =
> GWHf6lnOUx4tbmoyKHgfWViyfG2dnAmTL1/8VMTZzfk=
> SHA256 (go_modules/golang.org/x/text/@v/v0.3.0.mod) =
> NoedWG/YAB6E2oeHGQoR5PeHSeKoHf6Lm2kxiZ//Mc8=
> SHA256 (go_modules/golang.org/x/text/@v/v0.3.3.mod) =
> +7eojtFAUV55Dsp6EP/TGcl4axHGpsfln4D3+ze7RUI=
> SHA256 (go_modules/golang.org/x/text/@v/v0.3.6.mod) =
> +7eojtFAUV55Dsp6EP/TGcl4axHGpsfln4D3+ze7RUI=
> @@ -194,13 +201,12 @@ SHA256 (go_modules/golang.org/x/tools/@v/v0.8.0.mod) =
> SHA256 (go_modules/golang.org/x/tools/@v/v0.1.12.mod) =
> KouTZYmPCCL6zmW6CJoTU+aKZdNC8wDKMXzOzN5kIfM=
> SHA256 (go_modules/golang.org/x/tools/@v/v0.2.0.mod) =
> nJteYq9p8rEAKc4SlE3Ig08SJqg7skPpoNvzfguxhro=
> SHA256
> (go_modules/golang.org/x/tools/@v/v0.6.1-0.20230217175706-3102dad5faf9.mod) =
> gw7Xjc0+mSfEEuJkEjAwhEd0nVE9MQJNJ24kQ7IBZgk=
> -SHA256 (go_modules/golang.org/x/tools/@v/v0.8.0.mod) =
> QuEQONrSiBnOMc9u0+HY36K6xQ3gzbPgfv/yim5sEe0=
> -SHA256 (go_modules/golang.org/x/tools/@v/v0.8.0.zip) =
> LLg+45pBSPgFOX+nniasTNFlL5yZTBB9fQ3E456djGA=
> +SHA256 (go_modules/golang.org/x/tools/@v/v0.9.1.mod) =
> FBIGSEXOBF727VKe3jyzqLyO1KKnwrfU+WeAfXyVhVE=
> +SHA256 (go_modules/golang.org/x/tools/@v/v0.9.1.zip) =
> dCakc0lBfS0RRIfafgtog8qyK7ibRq5JF0Mm94QoccM=
> SHA256
> (go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.mod) =
> 7Myv1lmpCaM+E9+f7Z3rH0tCHyldsvRHWsUS/3jHXPA=
> SHA256
> (go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.zip) =
> NaXn5o77jm6373+pQn8hnIDgLEBR121/xPCAu8zUnDQ=
> SHA256
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.mod) =
> ql4+ybt7n2gWCe+sAZ2d4ae6dxkkj/Hqon54iC2z1/U=
> -SHA256
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.mod) =
> ql4+ybt7n2gWCe+sAZ2d4ae6dxkkj/Hqon54iC2z1/U=
> -SHA256
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.zip) =
> qTAQq9PE9INxDDf7h1Ead2lC9wm0wYIKKNCZ1EhoA5A=
> +SHA256
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.zip) =
> xOnwY8/tVGyQ8AqWV96sT5FaiZT4y+bb0/GOeeuDAs8=
> SHA256
> (go_modules/gopkg.in/check.v1/@v/v0.0.0-20161208181325-20d25e280405.mod) =
> XDBuDWM81moRtA4uX7vG2kIRDbfXLqPBUkzrRe5Awz8=
> SHA256
> (go_modules/gopkg.in/check.v1/@v/v1.0.0-20190902080502-41f04d3bba15.mod) =
> XDBuDWM81moRtA4uX7vG2kIRDbfXLqPBUkzrRe5Awz8=
> SHA256
> (go_modules/gopkg.in/check.v1/@v/v1.0.0-20200227125254-8fa46927fb4f.mod) =
> XDBuDWM81moRtA4uX7vG2kIRDbfXLqPBUkzrRe5Awz8=
> @@ -224,7 +230,7 @@ SHA256 (osv-scanner-v1.3.2.zip) = sskngEt251OO7KdFhZHA
> SHA256 (go_modules/rsc.io/pdf/@v/v0.1.1.zip) =
> eb8xDjmc8OLYqmFTZ1DSppmcXKiE56J/r4jTcBzVuo8=
> SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) =
> L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE=
> SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) =
> qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk=
> -SHA256 (osv-scanner-v1.3.2.zip) =
> sskngEt251OO7KdFhZHA5hnlGAl7yzxPjolFoncuWYo=
> +SHA256 (osv-scanner-v1.3.3.zip) =
> TriperDLag9GCE68ifKB7SqCResUNCKRXkoqD0KzauY=
> SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v0.3.1.mod) = 34
> SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.2.1.mod) = 43
> SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.2.1.zip) = 238822
> @@ -236,6 +242,8 @@ SIZE (go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0
> SIZE
> (go_modules/github.com/!proton!mail/go-crypto/@v/v0.0.0-20230217124315-7d5c6f04bbb8.zip)
> = 418901
> SIZE (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.mod) = 81
> SIZE (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.zip) = 7050
> +SIZE
> (go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.mod)
> = 55
> +SIZE
> (go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.zip)
> = 19578
> SIZE
> (go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.mod)
> = 44
> SIZE
> (go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.zip)
> = 5367
> SIZE
> (go_modules/github.com/armon/go-socks5/@v/v0.0.0-20160902184237-e75332964ef5.mod)
> = 34
> @@ -243,11 +251,13 @@ SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v
> SIZE (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.mod) = 209
> SIZE (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.zip) = 289386
> SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.mod) = 49
> -SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.zip) = 166392
> +SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.mod) = 49
> +SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.zip) = 167051
> SIZE (go_modules/github.com/client9/misspell/@v/v0.3.4.mod) = 35
> SIZE (go_modules/github.com/client9/misspell/@v/v0.3.4.zip) = 246908
> SIZE (go_modules/github.com/cloudflare/circl/@v/v1.1.0.mod) = 207
> -SIZE (go_modules/github.com/cloudflare/circl/@v/v1.1.0.zip) = 4613872
> +SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.mod) = 181
> +SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 4909858
> SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100
> SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539
> SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39
> @@ -270,7 +280,6 @@ SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.7.mo
> SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.6.1.zip) = 671202
> SIZE
> (go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.mod)
> = 126
> SIZE
> (go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.zip)
> = 29538
> -SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.7.mod) = 106
> SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 41
> SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 41
> SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 130220
> @@ -330,20 +339,22 @@ SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.4.
> SIZE
> (go_modules/github.com/spdx/gordf/@v/v0.0.0-20201111095634-7098f93598fb.mod)
> = 38
> SIZE
> (go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.mod)
> = 38
> SIZE
> (go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.zip)
> = 56398
> -SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.mod) = 174
> -SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.zip) = 595063
> +SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.mod) = 285
> +SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.zip) = 579739
> SIZE (go_modules/github.com/stretchr/objx/@v/v0.1.0.mod) = 32
> SIZE (go_modules/github.com/stretchr/objx/@v/v0.4.0.mod) = 137
> -SIZE (go_modules/github.com/stretchr/objx/@v/v0.4.0.zip) = 44330
> +SIZE (go_modules/github.com/stretchr/objx/@v/v0.5.0.mod) = 85
> +SIZE (go_modules/github.com/stretchr/objx/@v/v0.5.0.zip) = 44362
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.2.2.mod) = 35
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.4.0.mod) = 179
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.7.0.mod) = 216
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.7.1.mod) = 216
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.7.4.mod) = 188
> +SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.0.mod) = 188
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.2.mod) = 188
> SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.2.zip) = 114188
> -SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.mod) = 280
> -SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.zip) = 3548657
> +SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.mod) = 280
> +SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.zip) = 3548796
> SIZE (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.mod) = 203
> SIZE (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.zip) = 11274
> SIZE
> (go_modules/github.com/xrash/smetrics/@v/v0.0.0-20201216005158-039620a65673.mod)
> = 33
> @@ -358,11 +369,12 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) =
> SIZE
> (go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) =
> 255
> SIZE
> (go_modules/golang.org/x/crypto/@v/v0.0.0-20220826181053-bd7e27e6170d.mod) =
> 255
> SIZE (go_modules/golang.org/x/crypto/@v/v0.1.0.mod) = 171
> +SIZE
> (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod)
> = 171
> SIZE (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) = 171
> SIZE (go_modules/golang.org/x/crypto/@v/v0.6.0.zip) = 1761232
> SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20220722155223-a9213eeb770e.mod)
> = 325
> -SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.mod)
> = 176
> -SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.zip)
> = 445555
> +SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.mod)
> = 176
> +SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.zip)
> = 445818
> SIZE (go_modules/golang.org/x/mod/@v/v0.10.0.mod) = 84
> SIZE (go_modules/golang.org/x/mod/@v/v0.10.0.zip) = 162521
> SIZE
> (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod)
> = 157
> @@ -374,14 +386,15 @@ SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123
> SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod)
> = 179
> SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220826154423-83b083e8dc8b.mod)
> = 179
> SIZE (go_modules/golang.org/x/net/@v/v0.1.0.mod) = 123
> +SIZE (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 123
> +SIZE (go_modules/golang.org/x/net/@v/v0.10.0.zip) = 1564890
> SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123
> SIZE (go_modules/golang.org/x/net/@v/v0.7.0.mod) = 123
> -SIZE (go_modules/golang.org/x/net/@v/v0.9.0.mod) = 123
> -SIZE (go_modules/golang.org/x/net/@v/v0.9.0.zip) = 1561724
> SIZE
> (go_modules/golang.org/x/sync/@v/v0.0.0-20190423024810-112230192c58.mod) = 25
> SIZE
> (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = 25
> SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 25
> -SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.zip) = 27781
> +SIZE (go_modules/golang.org/x/sync/@v/v0.2.0.mod) = 25
> +SIZE (go_modules/golang.org/x/sync/@v/v0.2.0.zip) = 27919
> SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod)
> = 24
> SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod)
> = 33
> SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20200302150141-5c8b2ff67527.mod)
> = 33
> @@ -399,15 +412,15 @@ SIZE (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 33
> SIZE (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 33
> SIZE (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 33
> SIZE (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 33
> -SIZE (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 33
> -SIZE (go_modules/golang.org/x/sys/@v/v0.7.0.zip) = 1893247
> +SIZE (go_modules/golang.org/x/sys/@v/v0.8.0.mod) = 33
> +SIZE (go_modules/golang.org/x/sys/@v/v0.8.0.zip) = 1894928
> SIZE
> (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = 95
> SIZE
> (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = 95
> SIZE
> (go_modules/golang.org/x/term/@v/v0.0.0-20220722155259-a9ba230a4035.mod) = 95
> SIZE (go_modules/golang.org/x/term/@v/v0.1.0.mod) = 95
> SIZE (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 67
> -SIZE (go_modules/golang.org/x/term/@v/v0.7.0.mod) = 67
> -SIZE (go_modules/golang.org/x/term/@v/v0.7.0.zip) = 19924
> +SIZE (go_modules/golang.org/x/term/@v/v0.8.0.mod) = 67
> +SIZE (go_modules/golang.org/x/term/@v/v0.8.0.zip) = 19924
> SIZE (go_modules/golang.org/x/text/@v/v0.3.0.mod) = 25
> SIZE (go_modules/golang.org/x/text/@v/v0.3.3.mod) = 97
> SIZE (go_modules/golang.org/x/text/@v/v0.3.6.mod) = 97
> @@ -421,13 +434,12 @@ SIZE (go_modules/golang.org/x/tools/@v/v0.8.0.mod) = 2
> SIZE (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 327
> SIZE (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 177
> SIZE
> (go_modules/golang.org/x/tools/@v/v0.6.1-0.20230217175706-3102dad5faf9.mod) =
> 211
> -SIZE (go_modules/golang.org/x/tools/@v/v0.8.0.mod) = 212
> -SIZE (go_modules/golang.org/x/tools/@v/v0.8.0.zip) = 3074447
> +SIZE (go_modules/golang.org/x/tools/@v/v0.9.1.mod) = 213
> +SIZE (go_modules/golang.org/x/tools/@v/v0.9.1.zip) = 3120890
> SIZE
> (go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.mod) = 568
> SIZE
> (go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.zip) =
> 305007
> SIZE
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.mod) =
> 37
> -SIZE
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.mod) =
> 37
> -SIZE
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.zip) =
> 22282
> +SIZE
> (go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.zip) =
> 20009
> SIZE
> (go_modules/gopkg.in/check.v1/@v/v0.0.0-20161208181325-20d25e280405.mod) = 25
> SIZE
> (go_modules/gopkg.in/check.v1/@v/v1.0.0-20190902080502-41f04d3bba15.mod) = 25
> SIZE
> (go_modules/gopkg.in/check.v1/@v/v1.0.0-20200227125254-8fa46927fb4f.mod) = 25
> @@ -451,4 +463,4 @@ SIZE (osv-scanner-v1.3.2.zip) = 893481
> SIZE (go_modules/rsc.io/pdf/@v/v0.1.1.zip) = 50919
> SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106
> SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567
> -SIZE (osv-scanner-v1.3.2.zip) = 893481
> +SIZE (osv-scanner-v1.3.3.zip) = 899204
> blob - 2941fe15840197da7a371944022a34e029310dda
> blob + 9dc60d3a42c30d6dba6ad495077a9f0265acae36
> --- security/osv-scanner/modules.inc
> +++ security/osv-scanner/modules.inc
> @@ -4,12 +4,13 @@ MODGO_MODULES = \
> github.com/!microsoft/go-winio v0.5.2 \
> github.com/!proton!mail/go-crypto
> v0.0.0-20230217124315-7d5c6f04bbb8 \
> github.com/acomagu/bufpipe v1.0.4 \
> + github.com/anchore/go-struct-converter
> v0.0.0-20221118182256-c68fdcfa2092 \
> github.com/anmitsu/go-shlex
> v0.0.0-20200514113438-38f4b401e2be \
> github.com/armon/go-socks5
> v0.0.0-20160902184237-e75332964ef5 \
> github.com/bradleyjkemp/cupaloy/v2 v2.8.0 \
> - github.com/bwesterb/go-ristretto v1.2.0 \
> + github.com/bwesterb/go-ristretto v1.2.3 \
> github.com/client9/misspell v0.3.4 \
> - github.com/cloudflare/circl v1.1.0 \
> + github.com/cloudflare/circl v1.3.3 \
> github.com/cpuguy83/go-md2man/v2 v2.0.2 \
> github.com/creack/pty v1.1.9 \
> github.com/davecgh/go-spew v1.1.1 \
> @@ -47,25 +48,25 @@ MODGO_MODULES = \
> github.com/sirupsen/logrus v1.7.0 \
> github.com/skeema/knownhosts v1.1.0 \
> github.com/spdx/gordf
> v0.0.0-20221230105357-b735bd5aac89 \
> - github.com/spdx/tools-golang v0.4.0 \
> - github.com/stretchr/objx v0.4.0 \
> + github.com/spdx/tools-golang v0.5.0 \
> + github.com/stretchr/objx v0.5.0 \
> github.com/stretchr/testify v1.8.2 \
> - github.com/urfave/cli/v2 v2.25.1 \
> + github.com/urfave/cli/v2 v2.25.3 \
> github.com/xanzy/ssh-agent v0.3.3 \
> github.com/xrash/smetrics
> v0.0.0-20201216005158-039620a65673 \
> github.com/yuin/goldmark v1.4.13 \
> golang.org/x/arch v0.1.0 \
> golang.org/x/crypto v0.6.0 \
> - golang.org/x/exp
> v0.0.0-20230425010034-47ecfdc1ba53 \
> + golang.org/x/exp
> v0.0.0-20230510235704-dd950f8aeaea \
> golang.org/x/mod v0.10.0 \
> - golang.org/x/net v0.9.0 \
> - golang.org/x/sync v0.1.0 \
> - golang.org/x/sys v0.7.0 \
> - golang.org/x/term v0.7.0 \
> + golang.org/x/net v0.10.0 \
> + golang.org/x/sync v0.2.0 \
> + golang.org/x/sys v0.8.0 \
> + golang.org/x/term v0.8.0 \
> golang.org/x/text v0.9.0 \
> - golang.org/x/tools v0.8.0 \
> + golang.org/x/tools v0.9.1 \
> golang.org/x/vuln
> v0.0.0-20230303230808-d3042fecc4e3 \
> - golang.org/x/xerrors
> v0.0.0-20191204190536-9bdfabe68543 \
> + golang.org/x/xerrors
> v0.0.0-20190717185122-a985d3407aa7 \
> gopkg.in/check.v1
> v1.0.0-20201130134442-10cb98267c6c \
> gopkg.in/warnings.v0 v0.1.2 \
> gopkg.in/yaml.v2 v2.4.0 \
> @@ -76,80 +77,84 @@ MODGO_MODFILES = \
> sigs.k8s.io/yaml v1.3.0
>
> MODGO_MODFILES = \
> - github.com/!burnt!sushi/toml v0.3.1 \
> - github.com/davecgh/go-spew v1.1.0 \
> - github.com/go-git/go-billy/v5 v5.3.1 \
> - github.com/google/go-cmp v0.5.7 \
> - github.com/google/go-cmp v0.5.8 \
> - github.com/kr/pretty v0.1.0 \
> - github.com/kr/pretty v0.2.1 \
> - github.com/kr/text v0.1.0 \
> - github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb \
> - github.com/stretchr/objx v0.1.0 \
> - github.com/stretchr/testify v1.2.2 \
> - github.com/stretchr/testify v1.4.0 \
> - github.com/stretchr/testify v1.7.0 \
> - github.com/stretchr/testify v1.7.1 \
> - github.com/stretchr/testify v1.7.4 \
> - golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 \
> - golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 \
> - golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e \
> - golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d \
> - golang.org/x/crypto v0.0.0-20220826181053-bd7e27e6170d \
> - golang.org/x/crypto v0.1.0 \
> - golang.org/x/exp v0.0.0-20220722155223-a9213eeb770e \
> - golang.org/x/mod v0.6.0 \
> - golang.org/x/mod
> v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
> - golang.org/x/mod v0.8.0 \
> - golang.org/x/net v0.0.0-20190620200207-3b0461eec859 \
> - golang.org/x/net v0.0.0-20210226172049-e18ecbb05110 \
> - golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 \
> - golang.org/x/net v0.0.0-20220722155237-a158d28d115b \
> - golang.org/x/net v0.0.0-20220826154423-83b083e8dc8b \
> - golang.org/x/net v0.1.0 \
> - golang.org/x/net v0.6.0 \
> - golang.org/x/net v0.7.0 \
> - golang.org/x/sync v0.0.0-20190423024810-112230192c58 \
> - golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 \
> - golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a \
> - golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 \
> - golang.org/x/sys v0.0.0-20200302150141-5c8b2ff67527 \
> - golang.org/x/sys v0.0.0-20201119102817-f84b799fce68 \
> - golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c \
> - golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4 \
> - golang.org/x/sys v0.0.0-20210423082822-04245dca01da \
> - golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1 \
> - golang.org/x/sys v0.0.0-20211007075335-d3039528d8ac \
> - golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a \
> - golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 \
> - golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f \
> - golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 \
> - golang.org/x/sys v0.0.0-20220825204002-c680a09ffe64 \
> - golang.org/x/sys v0.1.0 \
> - golang.org/x/sys v0.3.0 \
> - golang.org/x/sys v0.5.0 \
> - golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1 \
> - golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 \
> - golang.org/x/term v0.0.0-20220722155259-a9ba230a4035 \
> - golang.org/x/term v0.1.0 \
> - golang.org/x/term v0.5.0 \
> - golang.org/x/text v0.3.0 \
> - golang.org/x/text v0.3.3 \
> - golang.org/x/text v0.3.6 \
> - golang.org/x/text v0.3.7 \
> - golang.org/x/text v0.4.0 \
> - golang.org/x/text v0.7.0 \
> - golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e \
> - golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e \
> - golang.org/x/tools v0.1.12 \
> - golang.org/x/tools v0.2.0 \
> - golang.org/x/tools v0.6.1-0.20230217175706-3102dad5faf9 \
> - golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7 \
> - gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 \
> - gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 \
> - gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f \
> - gopkg.in/yaml.v2 v2.2.2 \
> - gopkg.in/yaml.v2 v2.2.4 \
> - gopkg.in/yaml.v3 v3.0.0 \
> - gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
> + github.com/!burnt!sushi/toml v0.3.1 \
> + github.com/bwesterb/go-ristretto v1.2.0 \
> + github.com/cloudflare/circl v1.1.0 \
> + github.com/davecgh/go-spew v1.1.0 \
> + github.com/go-git/go-billy/v5 v5.3.1 \
> + github.com/google/go-cmp v0.5.8 \
> + github.com/kr/pretty v0.1.0 \
> + github.com/kr/pretty v0.2.1 \
> + github.com/kr/text v0.1.0 \
> + github.com/spdx/gordf
> v0.0.0-20201111095634-7098f93598fb \
> + github.com/stretchr/objx v0.1.0 \
> + github.com/stretchr/objx v0.4.0 \
> + github.com/stretchr/testify v1.2.2 \
> + github.com/stretchr/testify v1.4.0 \
> + github.com/stretchr/testify v1.7.0 \
> + github.com/stretchr/testify v1.7.1 \
> + github.com/stretchr/testify v1.7.4 \
> + github.com/stretchr/testify v1.8.0 \
> + golang.org/x/crypto
> v0.0.0-20190308221718-c2843e01d9a2 \
> + golang.org/x/crypto
> v0.0.0-20210921155107-089bfa567519 \
> + golang.org/x/crypto
> v0.0.0-20220525230936-793ad666bf5e \
> + golang.org/x/crypto
> v0.0.0-20220622213112-05595931fe9d \
> + golang.org/x/crypto
> v0.0.0-20220826181053-bd7e27e6170d \
> + golang.org/x/crypto v0.1.0 \
> + golang.org/x/crypto
> v0.3.1-0.20221117191849-2c476679df9a \
> + golang.org/x/exp
> v0.0.0-20220722155223-a9213eeb770e \
> + golang.org/x/mod v0.6.0 \
> + golang.org/x/mod
> v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
> + golang.org/x/mod v0.8.0 \
> + golang.org/x/net
> v0.0.0-20190620200207-3b0461eec859 \
> + golang.org/x/net
> v0.0.0-20210226172049-e18ecbb05110 \
> + golang.org/x/net
> v0.0.0-20211112202133-69e39bad7dc2 \
> + golang.org/x/net
> v0.0.0-20220722155237-a158d28d115b \
> + golang.org/x/net
> v0.0.0-20220826154423-83b083e8dc8b \
> + golang.org/x/net v0.1.0 \
> + golang.org/x/net v0.6.0 \
> + golang.org/x/net v0.7.0 \
> + golang.org/x/sync
> v0.0.0-20190423024810-112230192c58 \
> + golang.org/x/sync
> v0.0.0-20220722155255-886fb9371eb4 \
> + golang.org/x/sync v0.1.0 \
> + golang.org/x/sys
> v0.0.0-20190215142949-d0b11bdaac8a \
> + golang.org/x/sys
> v0.0.0-20191026070338-33540a1f6037 \
> + golang.org/x/sys
> v0.0.0-20200302150141-5c8b2ff67527 \
> + golang.org/x/sys
> v0.0.0-20201119102817-f84b799fce68 \
> + golang.org/x/sys
> v0.0.0-20210124154548-22da62e12c0c \
> + golang.org/x/sys
> v0.0.0-20210320140829-1e4c9ba3b0c4 \
> + golang.org/x/sys
> v0.0.0-20210423082822-04245dca01da \
> + golang.org/x/sys
> v0.0.0-20210615035016-665e8c7367d1 \
> + golang.org/x/sys
> v0.0.0-20211007075335-d3039528d8ac \
> + golang.org/x/sys
> v0.0.0-20220520151302-bc2c85ada10a \
> + golang.org/x/sys
> v0.0.0-20220715151400-c0bba94af5f8 \
> + golang.org/x/sys
> v0.0.0-20220722155257-8c9f86f7a55f \
> + golang.org/x/sys
> v0.0.0-20220728004956-3c1f35247d10 \
> + golang.org/x/sys
> v0.0.0-20220825204002-c680a09ffe64 \
> + golang.org/x/sys v0.1.0 \
> + golang.org/x/sys v0.3.0 \
> + golang.org/x/sys v0.5.0 \
> + golang.org/x/term
> v0.0.0-20201126162022-7de9c90e9dd1 \
> + golang.org/x/term
> v0.0.0-20210927222741-03fcf44c2211 \
> + golang.org/x/term
> v0.0.0-20220722155259-a9ba230a4035 \
> + golang.org/x/term v0.1.0 \
> + golang.org/x/term v0.5.0 \
> + golang.org/x/text v0.3.0 \
> + golang.org/x/text v0.3.3 \
> + golang.org/x/text v0.3.6 \
> + golang.org/x/text v0.3.7 \
> + golang.org/x/text v0.4.0 \
> + golang.org/x/text v0.7.0 \
> + golang.org/x/tools
> v0.0.0-20180917221912-90fa682c2a6e \
> + golang.org/x/tools
> v0.0.0-20191119224855-298f0cb1881e \
> + golang.org/x/tools v0.1.12 \
> + golang.org/x/tools v0.2.0 \
> + golang.org/x/tools
> v0.6.1-0.20230217175706-3102dad5faf9 \
> + gopkg.in/check.v1
> v0.0.0-20161208181325-20d25e280405 \
> + gopkg.in/check.v1
> v1.0.0-20190902080502-41f04d3bba15 \
> + gopkg.in/check.v1
> v1.0.0-20200227125254-8fa46927fb4f \
> + gopkg.in/yaml.v2 v2.2.2 \
> + gopkg.in/yaml.v2 v2.2.4 \
> + gopkg.in/yaml.v3 v3.0.0 \
> + gopkg.in/yaml.v3
> v3.0.0-20200313102051-9f266ea9e77c
>
