Hello, Here's an update for osv-scanner which has been running fine on amd64. Other tests?
changelog: https://github.com/google/osv-scanner/releases/tag/v1.6.2 Thanks, Lucas
diff refs/heads/master refs/heads/osv-scanner commit - 7613a8cf0b66c00314807995741459338c5bd5d4 commit + 79224448a1d8ffe9f9a5e56791730c8f54ff2836 blob - 7f2a1cac0a859bce9ed72b508f08a8f316386202 blob + 950e8b5dd2048bfb31c626aa2f3abe23466e12d8 --- security/osv-scanner/Makefile +++ security/osv-scanner/Makefile @@ -6,7 +6,7 @@ ONLY_FOR_ARCHS = aarch64 amd64 mips64 riscv64 COMMENT = scan your project's dependencies for vulnerabilities -V = 1.6.1 +V = 1.6.2 MODGO_MODNAME = github.com/google/osv-scanner MODGO_VERSION = v${V} blob - 93ceb7953126b28476ffd3331f3c8e1387b057ab blob + b0f572931570f2d0c025cd3b5172433c011344b7 --- security/osv-scanner/distinfo +++ security/osv-scanner/distinfo @@ -4,8 +4,13 @@ SHA256 (go_modules/cloud.google.com/go/compute/metadat SHA256 (go_modules/cloud.google.com/go/compute/metadata/@v/v0.2.3.zip) = KShk29Cx3jepaOKF6UmIXlczhIN9gc02lb5c4uI5GIc= SHA256 (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 4jxLgDpsbm5FdHlG6H0kcEzXd1bMSEvf0XtXIjvzINY= SHA256 (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = Gn7zlnCcWDUha7R7qSGN1ECsUwdYPGnReYzp5FfxMR0= +SHA256 (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20231114023923-e40c4d5c34e5.mod) = h/veE8xDl3AO43RbynyN7nbNERVbVmMCHMmQ07wfiOc= SHA256 (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = h/veE8xDl3AO43RbynyN7nbNERVbVmMCHMmQ07wfiOc= SHA256 (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = 6enK6Ws3A9qUndelYdFX5ck9+OLN4POMROhxCHr08sk= +SHA256 (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = WnpKVdUYRv0AEsYuGl21fqLdd562akWx8o/C+Okbk5Y= +SHA256 (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = mxvUXKycVMBCaRmgLvHPEmC8WaM6e86FLtPH3LpQFg4= +SHA256 (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.mod) = PBARmS9BLys0bWQHHH40BDoAiidH3bPqo/In6id0XXw= +SHA256 (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.zip) = 9v1Va2QyQ05p9PTdcRwa0sd3llF6wXshSTv0cXdbjaA= SHA256 (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = JnfIL+dPIDdyiJpagBr7Mp2VF1UId92ssXIZFpurPt0= SHA256 (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.zip) = XeJGoMtMJW8/1dDbigihFPWK8MLhk7vwrZASEErbtrI= SHA256 (go_modules/github.com/!cyclone!d!x/cyclonedx-go/@v/v0.8.0.mod) = X1TYnaBD7V3Tmb6nIG+3k3AcVSRgAH6nq+sCUVmMX9s= @@ -42,6 +47,8 @@ SHA256 (go_modules/github.com/cncf/xds/go/@v/v0.0.0-20 SHA256 (go_modules/github.com/cncf/xds/go/@v/v0.0.0-20230607035331-e9ce68804cb4.zip) = oMbmbq3jV67aTtqp0JYSCFhg3EwLRO34ImV0k5vfYJE= SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro= SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I= +SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE= +SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = IO38wnr9eZF4C8kcpSPSaZnqAl5B9gvF7XG7rADhdeI= SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 3H2HZHOPLSMbofLvWkVzpI/kD2Rby4spHkIGljRXJTc= SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = CvlOtZEz/aaf0ETa/6fWK6Do0nFtT7HEJPPirWNtPjQ= SHA256 (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = vLKTkyUSN7eaF7bBm/KRNPQ+j0OMMZiYj81GGhzfBcw= @@ -57,6 +64,12 @@ SHA256 (go_modules/github.com/envoyproxy/protoc-gen-va SHA256 (go_modules/github.com/envoyproxy/protoc-gen-validate/@v/v1.0.2.zip) = p50Z+wZVVLIUSSx2GddguUQFQp58pp7eki6WiSmmb/s= SHA256 (go_modules/github.com/felixge/fgprof/@v/v0.9.3.mod) = G4FCpyTwr69dOnTq+HyFVk1QzegJwKNNz6AmZH+ucx4= SHA256 (go_modules/github.com/felixge/fgprof/@v/v0.9.3.zip) = LIMmgIes+Ldnvmnbw3wJn6hYVnY8Loj7mWN9Rutqwjw= +SHA256 (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.mod) = cxFqOWZ0gqB4QqNn1Ze7DFk05gNRPicBwCRh2PdqSe8= +SHA256 (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.zip) = bz2w1Z/F4ggHP2wgCkhz/J1FFU2/fZKtqPxp5bvGYV4= +SHA256 (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.mod) = qTKf7D6TiBiejVKKZSqPGMG528Fd1zjkXuHPZKJgMKI= +SHA256 (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.zip) = R0q2xm5qvE+ll5s/tIvCUf2yN+UtnwoodGy0ws1cAoY= +SHA256 (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.mod) = bkEHDHL8uKlTFntlUY8ObX02kEtalqLjYlSnpmYz044= +SHA256 (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.zip) = OQAkNiUsiKLxWcuTK3cyvakxnaGMhX/nVS0IVM/Z4Qk= SHA256 (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.mod) = e58vOhQap3SYfxqH3pDCYmF1qKUCULu557Sbxvv9Kf8= SHA256 (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.zip) = fJ36VBTamJYPw9nSBdJ3SNzGPTFIJqTUdF9IhrWpfx8= SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.mod) = L01TDeXjVrwb8VEBENnKBAbTI7bLlBl44d1zEdQYuo8= @@ -90,10 +103,8 @@ SHA256 (go_modules/github.com/google/renameio/@v/v0.1. SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = uFELs0B4aRoguOSQLTca/g6xcbLa+VP2fLOWDRkmzPM= SHA256 (go_modules/github.com/google/uuid/@v/v1.3.1.mod) = c9pHtjOLAKCC/UUao1oyc9OtwJuOm7qY2rAQkeQCr24= SHA256 (go_modules/github.com/google/uuid/@v/v1.3.1.zip) = nZ1s+yjObb5LUYxCxrzNZ7tTGhBoWYCPNugqXD+4xk0= -SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = qUfdi3h5PdOY6iCt7h99M8zydn2/juazzXe3Hxnm+5s= -SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = oQw5QvCbxRMiaNItS7nQwYSRItUz/ozfZepp2gXOu68= -SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw= -SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = aaRXXHjLCWywU1ZUDt/6cm2iBsql/heJ1iZx0wj0pUg= +SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw= +SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.zip) = QAc8gXYGfCcYpTeTl2Zq3vsT77ZEFn3wrj97GIVCKzY= SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 4+87N7MKDkMiuzbTB2k2Og1Dv0YszdpGT6Y4YtFpT5c= SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = TNCVWr7qQ9xLWgi4dp5pYQngN28qETqbjv8TzJDKwcc= SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.5.3.mod) = CcS/hHDsFeQrjDq1SPl3bKNC6tZw+75rph4grx4U8MM= @@ -108,6 +119,8 @@ SHA256 (go_modules/github.com/kr/pty/@v/v1.1.1.zip) = SHA256 (go_modules/github.com/kr/text/@v/v0.1.0.mod) = L7qVKeXBPd5i83Hvc4O68E1xMlAdrGqgjpEPnsC/hcU= SHA256 (go_modules/github.com/kr/text/@v/v0.2.0.mod) = 9jh5sgT2zolc6lNZS4FPWsCvCEhrM7HKecZXOE77xyY= SHA256 (go_modules/github.com/kr/text/@v/v0.2.0.zip) = No6zGPkaW2e+kFxHAyq1wxodSal4SLEBGg0KISKzC6Q= +SHA256 (go_modules/github.com/maruel/natural/@v/v1.1.0.mod) = yoZQDbGGI1+Id1DCr4bGyMnJx+553MwrNOZy/Ja6O7o= +SHA256 (go_modules/github.com/maruel/natural/@v/v1.1.0.zip) = SGRrh/1r6ypIc3s7ddS6NXvQ1sDuM37gcmLCSnyn/yc= SHA256 (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.mod) = IWyT0ZMQYSyB1cdBAkmJ+DiX0jM8Op+We1ixMXWH9Rk= SHA256 (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.zip) = 2XxPBmehSVdWnJMqjiSI8cQ3V7TczjE4l6oAHwfRSbA= SHA256 (go_modules/github.com/mmcloughlin/avo/@v/v0.5.0.mod) = ub0wCk3oARuPZ7dUz1udGPukajNNjUlaQBMZXtg3QXQ= @@ -124,6 +137,8 @@ SHA256 (go_modules/github.com/pandatix/go-cvss/@v/v0.6 SHA256 (go_modules/github.com/pandatix/go-cvss/@v/v0.6.2.zip) = qdwiUINJPYS29uBDsVcF4w126chpOiHAAWTchtaILfw= SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 8Qo2tGIntPuz5pD2zHJtlGR18xZp7rxSxK1bLombToA= SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = rP7pbdL+jmrgiumGRQSDCknSNddMKrk996XfopqQpGE= +SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = XVuUVOLQIK8MdgNWjoaQS5m+/E1dZ8OoUF9hIVib0R8= +SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 81sj/dK5Ui3dRsxcAWG08HZcUUR11dTKKoasoxOIyL0= SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 3yjGqCPxgddheWlxd8DFlDxv+zjzwQstxTvjYO59RYk= SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 1MNri80GFikKORMhXg9TuTG9bgBnBZbylg3xtEryvQc= SHA256 (go_modules/github.com/pkg/profile/@v/v1.7.0.mod) = SnkqIyRN7sE3zqtMGrCjdQcat/FyI0w6M+JL0BlpR7U= @@ -135,6 +150,7 @@ SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mo SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = dAzVgDEE763yd6DzUZ8OrZfjIdvZCc7uvXyLaza0R1Q= SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = zRKUMvaTrNtOkSxjkyyxIG1UWcjboC3sG0GPgH3LeOs= SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = NinUsuRX/bpenVGjduK+rZsoogaW+pBbcBx5JQGIxOM= +SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = kFmpfaKZDIGaCXZ6XpvYeEtFpXt6JeKQVbvRsKqhRP8= SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = w5VHzOboZujPo5XSk3vOMIAc0H8LkBwhMySPH7oS9Y0= SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = eFJ1DVigU844sB8sIDIIgXVk9VLr83GytjAIHXAExq4= SHA256 (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = IObs3/d7hGk4Nbl4uKFvbCK3hVlisjQQPV63SBi+RB8= @@ -163,6 +179,16 @@ SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.4.zip) = 4gbart4L0D3gYL3765hKwsSbgwWHU//8k/4MIg6odTI= SHA256 (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.mod) = rgAGWi389/UqxU+L2CZMy/xhWdcRqzEv3hTpLph2Prs= SHA256 (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.zip) = 8m+czoXKLRfpnM64pu+R5OVXZWLBHbKGDgv3aU2ExNQ= +SHA256 (go_modules/github.com/tidwall/gjson/@v/v1.14.2.mod) = 2U7s2AUM/8lXuZvtijCO/qpmmsE4VCkNCBot7VR4r5M= +SHA256 (go_modules/github.com/tidwall/gjson/@v/v1.17.0.mod) = 2U7s2AUM/8lXuZvtijCO/qpmmsE4VCkNCBot7VR4r5M= +SHA256 (go_modules/github.com/tidwall/gjson/@v/v1.17.0.zip) = i3HzD31yfJeYYdZOVJoZEeTNNtRwSBtR2imYuZSzxMY= +SHA256 (go_modules/github.com/tidwall/match/@v/v1.1.1.mod) = AjZOUVMn2ZiNH2vTevnFhPi5jTtPQ/nh8Y4m12rsD0Q= +SHA256 (go_modules/github.com/tidwall/match/@v/v1.1.1.zip) = K6QffyczDUng5DLL+Wv5ByCjPkqXvlj+U/Y6fmbwTTc= +SHA256 (go_modules/github.com/tidwall/pretty/@v/v1.2.0.mod) = blxfpJPY8Y6JdLOO1j6McYY8zlnmWdmNDvhBe/gePs8= +SHA256 (go_modules/github.com/tidwall/pretty/@v/v1.2.1.mod) = blxfpJPY8Y6JdLOO1j6McYY8zlnmWdmNDvhBe/gePs8= +SHA256 (go_modules/github.com/tidwall/pretty/@v/v1.2.1.zip) = kydXm/nmEN51Put8NcjPHj9W5uViPL9l5HvIB2Aj0as= +SHA256 (go_modules/github.com/tidwall/sjson/@v/v1.2.5.mod) = OLCTI6uO+PgDs9hrriyUdl04FaLVt1H9TwcDn0VRzG8= +SHA256 (go_modules/github.com/tidwall/sjson/@v/v1.2.5.zip) = /ED9qHx95VNi9jhuBp1nR3LyXJ12QR7oI6y5rHiyBWU= SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.mod) = XD3aJw3iuXT/2n/bvxItJJk7suwFeFtP+RROdhfqxBU= SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.zip) = UtYNuIDHWL39a1+2enBjtT3AjzpjgC6hxOKQrkCPEbM= SHA256 (go_modules/github.com/vmihailenco/msgpack/v4/@v/v4.3.12.mod) = LIDah2TON8JwC2yT3I7lPROceagqQKB1mAD3k4O8/cY= @@ -193,14 +219,15 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.18.0.mod) SHA256 (go_modules/golang.org/x/crypto/@v/v0.18.0.zip) = VBNHlyC79RgxRGUoBSA6PfdIANLygfYR6C06fsFfQyU= SHA256 (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk= SHA256 (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = yJ/iLnPawmoAplasEf9MbhprbNKrzFftzazew/va2C0= -SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.mod) = mR9g3gigToBWNSaTXIm9u5J07hRUdeXqAfjvGjxVdTs= -SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.zip) = Inr7dQ66eqtnQw276p46OIbIaKrkH+p43URYZaIDsjI= +SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.mod) = mR9g3gigToBWNSaTXIm9u5J07hRUdeXqAfjvGjxVdTs= +SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.zip) = cGuv2OfT19QRKmIwt06TBAFafY8zrxg+Arq8z7hyF+U= SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ= SHA256 (go_modules/golang.org/x/mod/@v/v0.14.0.mod) = XErAMQolMwdXA5zPOpjnX+/by31ETd0EkjAAOkSUW94= SHA256 (go_modules/golang.org/x/mod/@v/v0.14.0.zip) = mKEiySrVXe72dPZUa0wpXtk9EGF43STsQESa4ztBA3o= SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM= SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = mfQKUOjWDCWZrEXGzix21VSoQorNE8LGikk/ymGbT6g= SHA256 (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ= +SHA256 (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ= SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = br6z+vsJYS0+8f8EE9+qwFu6+PIpq94K4OASKY3+ZwI= SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo= SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo= @@ -315,15 +342,20 @@ SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312 SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = m1xb4Hh4qr/7KDXx3UhPUC/y64MhLl7fxmYXlz55hio= SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE= SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk= -SHA256 (osv-scanner-v1.6.1.zip) = q3cALnmazcW9q/6/C0F37kWZO5H+z4ns1csC2dgjT3s= +SHA256 (osv-scanner-v1.6.2.zip) = rucJfd2lZUbH+HPR6M43qAQfAks1OFe1Izpmn2+3wr0= SIZE (go_modules/cloud.google.com/go/compute/@v/v1.23.0.mod) = 1093 SIZE (go_modules/cloud.google.com/go/compute/@v/v1.23.0.zip) = 1756502 SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.2.3.mod) = 98 SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.2.3.zip) = 20855 SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 65 SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = 49320 +SIZE (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20231114023923-e40c4d5c34e5.mod) = 356 SIZE (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = 356 SIZE (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = 39831 +SIZE (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = 585 +SIZE (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = 83541 +SIZE (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.mod) = 39 +SIZE (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.zip) = 91136 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = 43 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.zip) = 303020 SIZE (go_modules/github.com/!cyclone!d!x/cyclonedx-go/@v/v0.8.0.mod) = 543 @@ -360,6 +392,8 @@ SIZE (go_modules/github.com/cncf/xds/go/@v/v0.0.0-2023 SIZE (go_modules/github.com/cncf/xds/go/@v/v0.0.0-20230607035331-e9ce68804cb4.zip) = 140361 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539 +SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39 +SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = 19440 SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 54 SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = 9553 SIZE (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = 34 @@ -375,6 +409,12 @@ SIZE (go_modules/github.com/envoyproxy/protoc-gen-vali SIZE (go_modules/github.com/envoyproxy/protoc-gen-validate/@v/v1.0.2.zip) = 227165 SIZE (go_modules/github.com/felixge/fgprof/@v/v0.9.3.mod) = 151 SIZE (go_modules/github.com/felixge/fgprof/@v/v0.9.3.zip) = 343885 +SIZE (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.mod) = 46 +SIZE (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.zip) = 15099 +SIZE (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.mod) = 47 +SIZE (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.zip) = 1349669 +SIZE (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.mod) = 454 +SIZE (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.zip) = 155263 SIZE (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.mod) = 371 SIZE (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.zip) = 35754 SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.mod) = 111 @@ -408,10 +448,8 @@ SIZE (go_modules/github.com/google/renameio/@v/v0.1.0. SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = 14941 SIZE (go_modules/github.com/google/uuid/@v/v1.3.1.mod) = 30 SIZE (go_modules/github.com/google/uuid/@v/v1.3.1.zip) = 26946 -SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = 45 -SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = 33608 -SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = 51 -SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = 696032 +SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.mod) = 51 +SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.zip) = 696101 SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 36 SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = 8654 SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.5.3.mod) = 528 @@ -426,6 +464,8 @@ SIZE (go_modules/github.com/kr/pty/@v/v1.1.1.zip) = 14 SIZE (go_modules/github.com/kr/text/@v/v0.1.0.mod) = 64 SIZE (go_modules/github.com/kr/text/@v/v0.2.0.mod) = 68 SIZE (go_modules/github.com/kr/text/@v/v0.2.0.zip) = 12607 +SIZE (go_modules/github.com/maruel/natural/@v/v1.1.0.mod) = 42 +SIZE (go_modules/github.com/maruel/natural/@v/v1.1.0.zip) = 10462 SIZE (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.mod) = 84 SIZE (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.zip) = 21768 SIZE (go_modules/github.com/mmcloughlin/avo/@v/v0.5.0.mod) = 134 @@ -442,6 +482,8 @@ SIZE (go_modules/github.com/pandatix/go-cvss/@v/v0.6.2 SIZE (go_modules/github.com/pandatix/go-cvss/@v/v0.6.2.zip) = 281859 SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 213 SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = 3528787 +SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = 36 +SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 219375 SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 29 SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 17866 SIZE (go_modules/github.com/pkg/profile/@v/v1.7.0.mod) = 81 @@ -453,6 +495,7 @@ SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mod) SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = 476937 SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = 167 SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = 183284 +SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = 112 SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = 42 SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = 122358 SIZE (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = 281 @@ -481,6 +524,16 @@ SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.4 SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.4.zip) = 120537 SIZE (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.mod) = 58 SIZE (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.zip) = 23362 +SIZE (go_modules/github.com/tidwall/gjson/@v/v1.14.2.mod) = 121 +SIZE (go_modules/github.com/tidwall/gjson/@v/v1.17.0.mod) = 121 +SIZE (go_modules/github.com/tidwall/gjson/@v/v1.17.0.zip) = 61942 +SIZE (go_modules/github.com/tidwall/match/@v/v1.1.1.mod) = 41 +SIZE (go_modules/github.com/tidwall/match/@v/v1.1.1.zip) = 6893 +SIZE (go_modules/github.com/tidwall/pretty/@v/v1.2.0.mod) = 42 +SIZE (go_modules/github.com/tidwall/pretty/@v/v1.2.1.mod) = 42 +SIZE (go_modules/github.com/tidwall/pretty/@v/v1.2.1.zip) = 12501 +SIZE (go_modules/github.com/tidwall/sjson/@v/v1.2.5.mod) = 122 +SIZE (go_modules/github.com/tidwall/sjson/@v/v1.2.5.zip) = 28719 SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.mod) = 280 SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.zip) = 3552284 SIZE (go_modules/github.com/vmihailenco/msgpack/v4/@v/v4.3.12.mod) = 382 @@ -511,14 +564,15 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.18.0.mod) = SIZE (go_modules/golang.org/x/crypto/@v/v0.18.0.zip) = 1797935 SIZE (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 171 SIZE (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = 171 -SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.mod) = 133 -SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.zip) = 589707 +SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.mod) = 133 +SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.zip) = 590537 SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = 84 SIZE (go_modules/golang.org/x/mod/@v/v0.14.0.mod) = 84 SIZE (go_modules/golang.org/x/mod/@v/v0.14.0.zip) = 165104 SIZE (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 157 SIZE (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = 117 SIZE (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = 84 +SIZE (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = 84 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = 172 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 181 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 181 @@ -633,4 +687,4 @@ SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-2023031216 SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = 28985 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567 -SIZE (osv-scanner-v1.6.1.zip) = 2166878 +SIZE (osv-scanner-v1.6.2.zip) = 3034859 blob - 7fe8089387d22745e421fe3e182603b347180fdf blob + a3b57b7d07e8c21e946abeea00fe96cf37efe4f1 --- security/osv-scanner/modules.inc +++ security/osv-scanner/modules.inc @@ -3,6 +3,8 @@ MODGO_MODULES = \ cloud.google.com/go/compute/metadata v0.2.3 \ dario.cat/mergo v1.0.0 \ deps.dev/api/v3alpha v0.0.0-20240109042716-00b51ef52ece \ + deps.dev/util/resolve v0.0.0-20240109042716-00b51ef52ece \ + deps.dev/util/semver v0.0.0-20240109040450-1e316b822bc4 \ github.com/!burnt!sushi/toml v1.3.2 \ github.com/!cyclone!d!x/cyclonedx-go v0.8.0 \ github.com/!microsoft/go-winio v0.6.1 \ @@ -19,6 +21,7 @@ MODGO_MODULES = \ github.com/cncf/udpa/go v0.0.0-20220112060539-c52dc94e7fbe \ github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 \ github.com/cpuguy83/go-md2man/v2 v2.0.2 \ + github.com/creack/pty v1.1.9 \ github.com/cyphar/filepath-securejoin v0.2.4 \ github.com/davecgh/go-spew v1.1.1 \ github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a \ @@ -26,6 +29,9 @@ MODGO_MODULES = \ github.com/envoyproxy/go-control-plane v0.11.1 \ github.com/envoyproxy/protoc-gen-validate v1.0.2 \ github.com/felixge/fgprof v0.9.3 \ + github.com/gkampitakis/ciinfo v0.3.0 \ + github.com/gkampitakis/go-diff v1.3.2 \ + github.com/gkampitakis/go-snaps v0.4.12 \ github.com/gliderlabs/ssh v0.3.5 \ github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 \ github.com/go-git/go-billy/v5 v5.5.0 \ @@ -39,14 +45,14 @@ MODGO_MODULES = \ github.com/google/pprof v0.0.0-20211214055906-6f57359322fd \ github.com/google/renameio v0.1.0 \ github.com/google/uuid v1.3.1 \ - github.com/hexops/gotextdiff v1.0.3 \ - github.com/ianlancetaylor/demangle v0.0.0-20231023195312-e2daf7ba7156 \ + github.com/ianlancetaylor/demangle v0.0.0-20240117034632-964b1d53ca6c \ github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 \ github.com/jedib0t/go-pretty/v6 v6.5.3 \ github.com/kevinburke/ssh_config v1.2.0 \ github.com/kr/pretty v0.3.1 \ github.com/kr/pty v1.1.1 \ github.com/kr/text v0.2.0 \ + github.com/maruel/natural v1.1.0 \ github.com/mattn/go-runewidth v0.0.15 \ github.com/mmcloughlin/avo v0.5.0 \ github.com/onsi/gomega v1.27.10 \ @@ -55,6 +61,7 @@ MODGO_MODULES = \ github.com/package-url/packageurl-go v0.1.2 \ github.com/pandatix/go-cvss v0.6.2 \ github.com/pjbgf/sha1cd v0.3.0 \ + github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e \ github.com/pkg/errors v0.9.1 \ github.com/pkg/profile v1.7.0 \ github.com/pmezard/go-difflib v1.0.0 \ @@ -69,6 +76,10 @@ MODGO_MODULES = \ github.com/stretchr/objx v0.5.0 \ github.com/stretchr/testify v1.8.4 \ github.com/terminalstatic/go-xsd-validate v0.1.5 \ + github.com/tidwall/gjson v1.17.0 \ + github.com/tidwall/match v1.1.1 \ + github.com/tidwall/pretty v1.2.1 \ + github.com/tidwall/sjson v1.2.5 \ github.com/urfave/cli/v2 v2.27.1 \ github.com/vmihailenco/msgpack/v4 v4.3.12 \ github.com/vmihailenco/tagparser v0.1.1 \ @@ -80,7 +91,7 @@ MODGO_MODULES = \ github.com/yuin/goldmark v1.4.13 \ github.com/zclconf/go-cty v1.10.0 \ golang.org/x/crypto v0.18.0 \ - golang.org/x/exp v0.0.0-20240112132812-db7319d0e0e3 \ + golang.org/x/exp v0.0.0-20240119083558-1b970713d09a \ golang.org/x/mod v0.14.0 \ golang.org/x/net v0.20.0 \ golang.org/x/oauth2 v0.13.0 \ @@ -105,6 +116,7 @@ MODGO_MODULES = \ sigs.k8s.io/yaml v1.3.0 MODGO_MODFILES = \ + deps.dev/api/v3alpha v0.0.0-20231114023923-e40c4d5c34e5 \ github.com/!microsoft/go-winio v0.5.2 \ github.com/!proton!mail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 \ github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 \ @@ -120,6 +132,7 @@ MODGO_MODFILES = \ github.com/kr/pretty v0.1.0 \ github.com/kr/text v0.1.0 \ github.com/rivo/uniseg v0.2.0 \ + github.com/rogpeppe/go-internal v1.9.0 \ github.com/sergi/go-diff v1.1.0 \ github.com/sirupsen/logrus v1.7.0 \ github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb \ @@ -130,6 +143,8 @@ MODGO_MODFILES = \ github.com/stretchr/testify v1.7.0 \ github.com/stretchr/testify v1.7.1 \ github.com/stretchr/testify v1.8.0 \ + github.com/tidwall/gjson v1.14.2 \ + github.com/tidwall/pretty v1.2.0 \ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 \ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 \ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d \ @@ -142,6 +157,7 @@ MODGO_MODFILES = \ golang.org/x/mod v0.6.0 \ golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 \ golang.org/x/mod v0.8.0 \ + golang.org/x/mod v0.9.0 \ golang.org/x/net v0.0.0-20190603091049-60506f45cf65 \ golang.org/x/net v0.0.0-20190620200207-3b0461eec859 \ golang.org/x/net v0.0.0-20200301022130-244492dfa37a \