Hello,

Here's an update for osv-scanner that's been working fine (including the
new git submodule support)

changelogs:
v1.4.2:
* Support versions with build metadata in yarn.lock files
* Add name field to sarif rule output

v1.4.3:
* Add support for scanning vendored C/C++ files
* Scan submodules commit hashes
* Fix gitignore matching for root directory
* Go binary not found should not be an error
* handle npm/yarn aliased packages
* fix: remove some extra newlines in sarif report

Thanks,
Lucas
diff /usr/ports
commit - c5b77b092bde2d474d0936a40ab5ec96b1cb48f7
path + /usr/ports
blob - 51165235f2fa2657378a1493cf4fcd70650c2174
file + security/osv-scanner/Makefile
--- security/osv-scanner/Makefile
+++ security/osv-scanner/Makefile
@@ -6,7 +6,7 @@ ONLY_FOR_ARCHS = aarch64 amd64 mips64 riscv64
 
 COMMENT =      scan your project's dependencies for vulnerabilities
 
-V =            1.4.1
+V =            1.4.3
 MODGO_MODNAME =        github.com/google/osv-scanner
 MODGO_VERSION =        v${V}
 
blob - 1c3905fdd57e69db79743785e482ca3635c5dc5e
file + security/osv-scanner/distinfo
--- security/osv-scanner/distinfo
+++ security/osv-scanner/distinfo
@@ -29,8 +29,6 @@ SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3
 SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 
XhGMBQbVxujLM33jULSE2jRUQIXNpV0xFKPm9DJSjfQ=
 SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 
FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro=
 SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 
cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I=
-SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 
6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE=
-SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = 
IO38wnr9eZF4C8kcpSPSaZnqAl5B9gvF7XG7rADhdeI=
 SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 
3H2HZHOPLSMbofLvWkVzpI/kD2Rby4spHkIGljRXJTc=
 SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = 
CvlOtZEz/aaf0ETa/6fWK6Do0nFtT7HEJPPirWNtPjQ=
 SHA256 (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = 
vLKTkyUSN7eaF7bBm/KRNPQ+j0OMMZiYj81GGhzfBcw=
@@ -46,10 +44,10 @@ SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.
 SHA256 
(go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.zip) 
= TNZ2ieEIz9ZUWRxKf2k6xREGNKc9q8EmhvsHhUVWxIA=
 SHA256 (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.mod) = 
lV2KV4w4+tlp0uW3oYjvDE6NEq5azxIpEqlM5Uh0cWo=
 SHA256 (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.zip) = 
KIxMaIK/qHg/E58+1XCdSrsTjWvlCmWKTbyH67LS5pQ=
-SHA256 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.mod)
 = P5LuI7zdrhBsbU6/lS5IJGZxxU6Sy6B8Uv1khnclPT8=
-SHA256 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.zip)
 = VGUYT34LRmv9QlPdoE+76oPV2/QE59cfT/oUXXXXFGM=
-SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.mod) = 
wJJgbd9+TN6sXn1bjVSgKzCZc0ySrRBcdW/4p5PAItk=
-SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.zip) = 
Hh03DZU89oEd4/7AkKDD3+dMafID5Ri5hxiicFSaiQ4=
+SHA256 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.mod)
 = C9xCgRy2U3CjDmfM2uzn1dth3TWm3IJzwPUVQy+XQkc=
+SHA256 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.zip)
 = UJGBEWUTNQAc1YN7pxKDZHuquRGEKiDSMzgRSHUhAMI=
+SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.mod) = 
ib4t+Sx7klpfqDckWNZqr2yUT5A/i0p0grMulsxycRQ=
+SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.zip) = 
NnUgxLo3HcUpkZ2G+5Fbjb0eEEp1V803tvePYKmhgUY=
 SHA256 (go_modules/github.com/goark/errs/@v/v1.1.0.mod) = 
HdP0dfT4+GCMG+9lWyqNew4gr5jOusFXVZMrCapncEY=
 SHA256 (go_modules/github.com/goark/errs/@v/v1.3.2.mod) = 
HyYYh2yL2wkHf1o8JI8FIoQ2HhL70Wd4Xb3DJevmEVk=
 SHA256 (go_modules/github.com/goark/errs/@v/v1.3.2.zip) = 
BHp53f/b9ic2FYTMDiUcoh+KFlVZDQPKyp+B+No8sH0=
@@ -65,17 +63,18 @@ SHA256 (go_modules/github.com/google/go-cmdtest/@v/v0.
 SHA256 (go_modules/github.com/google/go-cmp/@v/v0.3.1.mod) = 
gd95F8Ilqdp2BLIw2VL6J4xgqIMsENeZOF0TSwXVsIc=
 SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 
58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
 SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 
58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
-SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 
MkUIdKx1bvXUf2uBkwUQUwS5gZBFoW4/EFKJt88lLFE=
+SHA256 (go_modules/github.com/google/go-cmp/@v/v0.6.0.mod) = 
58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
+SHA256 (go_modules/github.com/google/go-cmp/@v/v0.6.0.zip) = 
S06b9sSCEQgGUbSR37SNaLc2xmowW8+UYFYG4bouqko=
 SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.mod) = 
uptesIeACKiR4WsIwXkisD+Sx2oD57/hgyY16tocGjU=
 SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = 
uFELs0B4aRoguOSQLTca/g6xcbLa+VP2fLOWDRkmzPM=
 SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = 
qUfdi3h5PdOY6iCt7h99M8zydn2/juazzXe3Hxnm+5s=
 SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = 
oQw5QvCbxRMiaNItS7nQwYSRItUz/ozfZepp2gXOu68=
-SHA256 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.mod)
 = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw=
-SHA256 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.zip)
 = tkJqMvfQUlxqYBKlvnsUulelmBDZSfrbO/7CL2ZgTKw=
+SHA256 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod)
 = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw=
+SHA256 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip)
 = aaRXXHjLCWywU1ZUDt/6cm2iBsql/heJ1iZx0wj0pUg=
 SHA256 
(go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod)
 = 4+87N7MKDkMiuzbTB2k2Og1Dv0YszdpGT6Y4YtFpT5c=
 SHA256 
(go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip)
 = TNCVWr7qQ9xLWgi4dp5pYQngN28qETqbjv8TzJDKwcc=
-SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.mod) = 
6XoX8CAsLf1TKpse+ECQWFEbotc5iRW95KfBuuQUDpw=
-SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.zip) = 
RxvkkXvRlhHh/qANfVs3d063Xz9pyhBbuccXGcChwf4=
+SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.mod) = 
6XoX8CAsLf1TKpse+ECQWFEbotc5iRW95KfBuuQUDpw=
+SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.zip) = 
AQCeQL/6/nrwhR5hX3OWWf301R4cHIbJhJroE5tjwH0=
 SHA256 (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.mod) = 
diFB8mquOK84YY9/UPtIZyw5q64Qj5Kyi9OwAvK/h28=
 SHA256 (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.zip) = 
mIY3mowx+QIc5oSQ4qIb2+p+X+lVMyKWUOGsFXHc14o=
 SHA256 (go_modules/github.com/kevinburke/ssh_config/@v/v1.2.0.mod) = 
2yQHDzYdFcUiAaC7wPRxbgz1QOSb1/uzaETFkS+Xk88=
@@ -99,14 +98,12 @@ SHA256 (go_modules/github.com/onsi/gomega/@v/v1.27.10.
 SHA256 (go_modules/github.com/onsi/gomega/@v/v1.27.10.zip) = 
p3Q2xyJdqRsCNyOrDq82KnSH5BThglYyWp5h2n8d0WQ=
 SHA256 (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.mod) = 
USsTAHBx6uHHFLSwFOm30iws5/CoWkNhkwNbfJ9us4g=
 SHA256 (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.zip) = 
B/aTZBUo1iga3QwLEcIOkHFKNPTazEWb+324yAV2+e0=
-SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.mod) = 
ZPuUC3bJFGNZ1JnFQ1uBLuW/9xi/xl7iqWvb6Y1SUuA=
-SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.zip) = 
1jdGbQrXUfTuHKi6eCpT23nxvnnBxhIbR+MIo0NY6U8=
-SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.mod) = 
WtMu4++y8MyV5RLpaxj2GWiBXwXLTpBVYacq5IyrWtE=
-SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.zip) = 
E4RHGgDw4CbF5F2fzMDaNj6UIyZ875M5jbFvzyS9uGA=
+SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.mod) = 
ZPuUC3bJFGNZ1JnFQ1uBLuW/9xi/xl7iqWvb6Y1SUuA=
+SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.zip) = 
p1xn5KEN/lyl7VTwnA0F2DsOgSBPJ8G1FnjEcVsjSUg=
+SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.mod) = 
WtMu4++y8MyV5RLpaxj2GWiBXwXLTpBVYacq5IyrWtE=
+SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.zip) = 
h/S4WfKmtkkuGsd5SX9bzE57MUaBk64uCrNAcAuT5bc=
 SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 
8Qo2tGIntPuz5pD2zHJtlGR18xZp7rxSxK1bLombToA=
 SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = 
rP7pbdL+jmrgiumGRQSDCknSNddMKrk996XfopqQpGE=
-SHA256 
(go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = 
XVuUVOLQIK8MdgNWjoaQS5m+/E1dZ8OoUF9hIVib0R8=
-SHA256 
(go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 
81sj/dK5Ui3dRsxcAWG08HZcUUR11dTKKoasoxOIyL0=
 SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 
3yjGqCPxgddheWlxd8DFlDxv+zjzwQstxTvjYO59RYk=
 SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 
1MNri80GFikKORMhXg9TuTG9bgBnBZbylg3xtEryvQc=
 SHA256 (go_modules/github.com/pkg/profile/@v/v1.6.0.mod) = 
BuBr9ahImE+FnbIYGOY0Xb1D+3SRWDdAS8AbYcfnwBY=
@@ -118,7 +115,6 @@ SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mo
 SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = 
dAzVgDEE763yd6DzUZ8OrZfjIdvZCc7uvXyLaza0R1Q=
 SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = 
zRKUMvaTrNtOkSxjkyyxIG1UWcjboC3sG0GPgH3LeOs=
 SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = 
NinUsuRX/bpenVGjduK+rZsoogaW+pBbcBx5JQGIxOM=
-SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = 
kFmpfaKZDIGaCXZ6XpvYeEtFpXt6JeKQVbvRsKqhRP8=
 SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = 
w5VHzOboZujPo5XSk3vOMIAc0H8LkBwhMySPH7oS9Y0=
 SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = 
eFJ1DVigU844sB8sIDIIgXVk9VLr83GytjAIHXAExq4=
 SHA256 (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = 
IObs3/d7hGk4Nbl4uKFvbCK3hVlisjQQPV63SBi+RB8=
@@ -173,17 +169,18 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20190
 SHA256 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20210921155107-089bfa567519.mod) = 
zWMRYSoqpNDX4DxBs6ofvC1fiVqz9hCJ+rgL/p+PVIU=
 SHA256 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = 
ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s=
 SHA256 (go_modules/golang.org/x/crypto/@v/v0.13.0.mod) = 
5/Nu6cqqredrdWX8aGItzI/a9tBd3uPn1cyuSWiNn00=
-SHA256 (go_modules/golang.org/x/crypto/@v/v0.13.0.zip) = 
tY2QL0in9ZWihYm27UvoteLuGjSW7KR3A56A625+ulc=
+SHA256 (go_modules/golang.org/x/crypto/@v/v0.14.0.mod) = 
M2oiBGbrPO1R60SJdioyZKXPtstxA1iHAJZmAJmpyqc=
+SHA256 (go_modules/golang.org/x/crypto/@v/v0.14.0.zip) = 
pyxX5x0PvUYNhJPJWPsoQTV+O6u7Mtf+LNUzVksdZrc=
 SHA256 
(go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 
t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk=
 SHA256 (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = 
yJ/iLnPawmoAplasEf9MbhprbNKrzFftzazew/va2C0=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.mod) 
= ko2BpDwXWlBsQQHgDgyVBo2xBccjjEVal9AqHKHaXn0=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.zip) 
= 54mSGiA2le3w0b/8mLD3a1+aJkwviO8ISi6pp2gIH4U=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.mod) 
= DV+cioupmmBfXQI2ZevcZujjjdf2tlVb0/C6CcbiLvQ=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.zip) 
= I1h7kTQ7ELe6YpK7Q1RiQIapxtzmXj59h48oqEYhJF0=
 SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = 
YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
-SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.zip) = 
ebf3n2i8gt/V3l9Yxam0dQEgvBsV+yAaGfJ/HX+071U=
+SHA256 (go_modules/golang.org/x/mod/@v/v0.13.0.mod) = 
XErAMQolMwdXA5zPOpjnX+/by31ETd0EkjAAOkSUW94=
+SHA256 (go_modules/golang.org/x/mod/@v/v0.13.0.zip) = 
H48DlcU3L/SbklZY4M/jooihotyRk7dmLhh/3rqcsWg=
 SHA256 
(go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 
QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM=
 SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = 
mfQKUOjWDCWZrEXGzix21VSoQorNE8LGikk/ymGbT6g=
 SHA256 (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = 
YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
-SHA256 (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = 
YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) 
= br6z+vsJYS0+8f8EE9+qwFu6+PIpq94K4OASKY3+ZwI=
 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) 
= 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo=
 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) 
= 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo=
@@ -192,7 +189,9 @@ SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20211112
 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) 
= sxXFJkfS2i925c2502fh1nJ3hCNqm/+2EhkrGbEKEo0=
 SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 
07fiNv8J5jIr5IkXAhbgGNMiGGLxoFPctj5T6rhTPBc=
 SHA256 (go_modules/golang.org/x/net/@v/v0.15.0.mod) = 
PRBkbW8I2OioVtbyLyzXBsPivgES63dyY8/ROSx25LQ=
-SHA256 (go_modules/golang.org/x/net/@v/v0.15.0.zip) = 
6JGUHwqD38hfgpkOKcvxk53KWVLQQkFmbIoifUGf3tM=
+SHA256 (go_modules/golang.org/x/net/@v/v0.16.0.mod) = 
y6YYS4uODVRWC/WmXxNszXanNMScBm7YA+twvQbBdpY=
+SHA256 (go_modules/golang.org/x/net/@v/v0.17.0.mod) = 
y6YYS4uODVRWC/WmXxNszXanNMScBm7YA+twvQbBdpY=
+SHA256 (go_modules/golang.org/x/net/@v/v0.17.0.zip) = 
2ZQo6Vr2/Y/cIyhdabj258UslkyZApXkUYNxjjPr61o=
 SHA256 (go_modules/golang.org/x/net/@v/v0.2.0.mod) = 
B+xkXjNT/CZz8tje5cFOuSi5wTEnpAn+PsQOq6Tb2zA=
 SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 
Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs=
 SHA256 (go_modules/golang.org/x/net/@v/v0.8.0.mod) = 
6275vWQFrOPZnkOB0CVs5B+Dxm0aILTigwpMd2JF9xo=
@@ -200,7 +199,8 @@ SHA256 (go_modules/golang.org/x/sync/@v/v0.0.0-2019042
 SHA256 
(go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = 
Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
 SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 
Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
 SHA256 (go_modules/golang.org/x/sync/@v/v0.3.0.mod) = 
7Q/wxQgadUz8vnaMvPYMY5dbNddufXuZxayb+m2YKFE=
-SHA256 (go_modules/golang.org/x/sync/@v/v0.3.0.zip) = 
GHDnoZb3EZ1Mbtun3pzfxJ7hPIy3kh86lHVoFxxhUuA=
+SHA256 (go_modules/golang.org/x/sync/@v/v0.4.0.mod) = 
7Q/wxQgadUz8vnaMvPYMY5dbNddufXuZxayb+m2YKFE=
+SHA256 (go_modules/golang.org/x/sync/@v/v0.4.0.zip) = 
d8XZxIuhxEAGDIfZobZ/LvUhaZQijhStP8/i3Zs/ITQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) 
= iWkRXko5EIhIMk55ob2KhEUjDm46rMvp+AV/tQ//yME=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) 
= GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20201119102817-f84b799fce68.mod) 
= GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
@@ -213,15 +213,16 @@ SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20220722
 SHA256 (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.11.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.12.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
-SHA256 (go_modules/golang.org/x/sys/@v/v0.12.0.zip) = 
iSJdnmYDwJD/2TKGt8oSSEn63+QyDDsYpr3MxKwIZyw=
+SHA256 (go_modules/golang.org/x/sys/@v/v0.13.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
+SHA256 (go_modules/golang.org/x/sys/@v/v0.13.0.zip) = 
PRSa/Jk5mANUN0wNR0Ydzb0dOYDrL3fmAwSyP+5vPTc=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.2.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.6.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 
(go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = 
TLqxT3cGdxsnHZlaGzzBMf5aJGqtx+5tG6bwvYlHgfo=
 SHA256 
(go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = 
dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
-SHA256 (go_modules/golang.org/x/term/@v/v0.12.0.mod) = 
wpIGWJdMmcgFJ4+azIRDYmbw9101cToIjB80DiZFM10=
-SHA256 (go_modules/golang.org/x/term/@v/v0.12.0.zip) = 
9LvEuqDJsFP30lKwbk6Lqr1oapqH2CAls0F5binznGA=
+SHA256 (go_modules/golang.org/x/term/@v/v0.13.0.mod) = 
Jid7C1vDPQJB8jN4OeimY9KmxgMFiHDyfO2d8f7n41c=
+SHA256 (go_modules/golang.org/x/term/@v/v0.13.0.zip) = 
ohQBM6te3qSG7JI52gGZXmBuYmHWbRpnPNKt0z0ID90=
 SHA256 (go_modules/golang.org/x/term/@v/v0.2.0.mod) = 
7fgz2hAZAP4s6NsjQJ5CRI9EGJjT19juRRmI47MMkwI=
 SHA256 (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 
DW9YIoqtwaZSjmdV2gGFFlZuOuXFIB963hdz9W+o2TQ=
 SHA256 (go_modules/golang.org/x/term/@v/v0.6.0.mod) = 
ZDWbnGU3CEePAgcpiFBE/z2ABxhtnUQRJf6HSBfnEgE=
@@ -242,7 +243,8 @@ SHA256 (go_modules/golang.org/x/tools/@v/v0.0.0-201911
 SHA256 (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 
KouTZYmPCCL6zmW6CJoTU+aKZdNC8wDKMXzOzN5kIfM=
 SHA256 
(go_modules/golang.org/x/tools/@v/v0.12.1-0.20230815132531-74c255bcf846.mod) = 
8ntM++BBE9T76CEuqUR3Q/vRDuxPOYipcdWhwKK6Crs=
 SHA256 (go_modules/golang.org/x/tools/@v/v0.13.0.mod) = 
FCs0FrAOghO0CeJ5pDS5emzglTHJFMG0cXh4FX1Xmj8=
-SHA256 (go_modules/golang.org/x/tools/@v/v0.13.0.zip) = 
b9HiUBEiFXCUVEaOrVPDHFJLBcyQpi7YF9DUeA/bZCk=
+SHA256 (go_modules/golang.org/x/tools/@v/v0.14.0.mod) = 
pdITAroFd4OVj1r/cpV+0ovqJT4vcH8bQqI98jt+CD8=
+SHA256 (go_modules/golang.org/x/tools/@v/v0.14.0.zip) = 
Hk7I++U5Xq4ZI+Kbc0IkEIuTMIa7TUbQO6ttVHnFQkI=
 SHA256 (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 
nJteYq9p8rEAKc4SlE3Ig08SJqg7skPpoNvzfguxhro=
 SHA256 (go_modules/golang.org/x/tools/@v/v0.6.0.mod) = 
gw7Xjc0+mSfEEuJkEjAwhEd0nVE9MQJNJ24kQ7IBZgk=
 SHA256 (go_modules/golang.org/x/vuln/@v/v1.0.1.mod) = 
SeGrgKrGADpn8mJTvUItgIa6TUOiI0YxwAjWkiMKVa8=
@@ -268,7 +270,7 @@ SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312
 SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) 
= m1xb4Hh4qr/7KDXx3UhPUC/y64MhLl7fxmYXlz55hio=
 SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 
L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE=
 SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 
qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk=
-SHA256 (osv-scanner-v1.4.1.zip) = LZpHavtemsCOWnUsaLU1T9YVHaAW5/MsTvaYUd3D5R0=
+SHA256 (osv-scanner-v1.4.3.zip) = gGbMvcS614X0Nk0ZbMqibrYtuTIcs+mpHafD4ItK3cQ=
 SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 65
 SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = 49320
 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = 43
@@ -300,8 +302,6 @@ SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3
 SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 4909858
 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100
 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539
-SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39
-SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = 19440
 SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 54
 SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = 9553
 SIZE (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = 34
@@ -317,10 +317,10 @@ SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20
 SIZE 
(go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.zip) 
= 41846
 SIZE (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.mod) = 573
 SIZE (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.zip) = 59927
-SIZE 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.mod)
 = 194
-SIZE 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.zip)
 = 98071761
-SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.mod) = 1640
-SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.zip) = 693750
+SIZE 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.mod)
 = 509
+SIZE 
(go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.zip)
 = 98219866
+SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.mod) = 1640
+SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.zip) = 725516
 SIZE (go_modules/github.com/goark/errs/@v/v1.1.0.mod) = 38
 SIZE (go_modules/github.com/goark/errs/@v/v1.3.2.mod) = 38
 SIZE (go_modules/github.com/goark/errs/@v/v1.3.2.zip) = 21778
@@ -336,17 +336,18 @@ SIZE (go_modules/github.com/google/go-cmdtest/@v/v0.4.
 SIZE (go_modules/github.com/google/go-cmp/@v/v0.3.1.mod) = 40
 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 41
 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 41
-SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 130220
+SIZE (go_modules/github.com/google/go-cmp/@v/v0.6.0.mod) = 41
+SIZE (go_modules/github.com/google/go-cmp/@v/v0.6.0.zip) = 129773
 SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.mod) = 34
 SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = 14941
 SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = 45
 SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = 33608
-SIZE 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.mod)
 = 51
-SIZE 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.zip)
 = 695790
+SIZE 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod)
 = 51
+SIZE 
(go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip)
 = 696032
 SIZE 
(go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod)
 = 36
 SIZE 
(go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip)
 = 8654
-SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.mod) = 192
-SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.zip) = 790460
+SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.mod) = 192
+SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.zip) = 794070
 SIZE (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.mod) = 106
 SIZE (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.zip) = 77449
 SIZE (go_modules/github.com/kevinburke/ssh_config/@v/v1.2.0.mod) = 40
@@ -370,14 +371,12 @@ SIZE (go_modules/github.com/onsi/gomega/@v/v1.27.10.mo
 SIZE (go_modules/github.com/onsi/gomega/@v/v1.27.10.zip) = 420749
 SIZE (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.mod) = 131
 SIZE (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.zip) = 37561
-SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.mod) = 138
-SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.zip) = 56051
-SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.mod) = 53
-SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.zip) = 15275
+SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.mod) = 138
+SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.zip) = 56185
+SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.mod) = 53
+SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.zip) = 17038
 SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 213
 SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = 3528787
-SIZE 
(go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = 36
-SIZE 
(go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 
219375
 SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 29
 SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 17866
 SIZE (go_modules/github.com/pkg/profile/@v/v1.6.0.mod) = 39
@@ -389,7 +388,6 @@ SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mod)
 SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = 476937
 SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = 167
 SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = 183284
-SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = 112
 SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = 42
 SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = 122358
 SIZE (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = 281
@@ -444,17 +442,18 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-2019030
 SIZE 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20210921155107-089bfa567519.mod) = 247
 SIZE 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = 255
 SIZE (go_modules/golang.org/x/crypto/@v/v0.13.0.mod) = 190
-SIZE (go_modules/golang.org/x/crypto/@v/v0.13.0.zip) = 1785967
+SIZE (go_modules/golang.org/x/crypto/@v/v0.14.0.mod) = 190
+SIZE (go_modules/golang.org/x/crypto/@v/v0.14.0.zip) = 1791629
 SIZE 
(go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 
171
 SIZE (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = 171
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.mod) = 
179
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.zip) = 
462986
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.mod) = 
179
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.zip) = 
462987
 SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = 84
-SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.zip) = 166176
+SIZE (go_modules/golang.org/x/mod/@v/v0.13.0.mod) = 84
+SIZE (go_modules/golang.org/x/mod/@v/v0.13.0.zip) = 165088
 SIZE 
(go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 
157
 SIZE (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = 117
 SIZE (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = 84
-SIZE (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = 84
 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = 
172
 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 
181
 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 
181
@@ -463,7 +462,9 @@ SIZE (go_modules/golang.org/x/net/@v/v0.0.0-2021111220
 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) = 
179
 SIZE (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 123
 SIZE (go_modules/golang.org/x/net/@v/v0.15.0.mod) = 155
-SIZE (go_modules/golang.org/x/net/@v/v0.15.0.zip) = 1791878
+SIZE (go_modules/golang.org/x/net/@v/v0.16.0.mod) = 155
+SIZE (go_modules/golang.org/x/net/@v/v0.17.0.mod) = 155
+SIZE (go_modules/golang.org/x/net/@v/v0.17.0.zip) = 1824828
 SIZE (go_modules/golang.org/x/net/@v/v0.2.0.mod) = 123
 SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123
 SIZE (go_modules/golang.org/x/net/@v/v0.8.0.mod) = 123
@@ -471,7 +472,8 @@ SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-201904230
 SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) 
= 25
 SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 25
 SIZE (go_modules/golang.org/x/sync/@v/v0.3.0.mod) = 34
-SIZE (go_modules/golang.org/x/sync/@v/v0.3.0.zip) = 29766
+SIZE (go_modules/golang.org/x/sync/@v/v0.4.0.mod) = 34
+SIZE (go_modules/golang.org/x/sync/@v/v0.4.0.zip) = 30186
 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) = 
24
 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) = 
33
 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20201119102817-f84b799fce68.mod) = 
33
@@ -484,15 +486,16 @@ SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-2022072215
 SIZE (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.11.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.12.0.mod) = 33
-SIZE (go_modules/golang.org/x/sys/@v/v0.12.0.zip) = 1908262
+SIZE (go_modules/golang.org/x/sys/@v/v0.13.0.mod) = 33
+SIZE (go_modules/golang.org/x/sys/@v/v0.13.0.zip) = 1901653
 SIZE (go_modules/golang.org/x/sys/@v/v0.2.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.6.0.mod) = 33
 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) 
= 95
 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) 
= 95
-SIZE (go_modules/golang.org/x/term/@v/v0.12.0.mod) = 68
-SIZE (go_modules/golang.org/x/term/@v/v0.12.0.zip) = 19958
+SIZE (go_modules/golang.org/x/term/@v/v0.13.0.mod) = 68
+SIZE (go_modules/golang.org/x/term/@v/v0.13.0.zip) = 19958
 SIZE (go_modules/golang.org/x/term/@v/v0.2.0.mod) = 67
 SIZE (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 67
 SIZE (go_modules/golang.org/x/term/@v/v0.6.0.mod) = 67
@@ -513,7 +516,8 @@ SIZE (go_modules/golang.org/x/tools/@v/v0.0.0-20191119
 SIZE (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 327
 SIZE 
(go_modules/golang.org/x/tools/@v/v0.12.1-0.20230815132531-74c255bcf846.mod) = 
214
 SIZE (go_modules/golang.org/x/tools/@v/v0.13.0.mod) = 214
-SIZE (go_modules/golang.org/x/tools/@v/v0.13.0.zip) = 3071376
+SIZE (go_modules/golang.org/x/tools/@v/v0.14.0.mod) = 194
+SIZE (go_modules/golang.org/x/tools/@v/v0.14.0.zip) = 3138694
 SIZE (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 177
 SIZE (go_modules/golang.org/x/tools/@v/v0.6.0.mod) = 211
 SIZE (go_modules/golang.org/x/vuln/@v/v1.0.1.mod) = 408
@@ -539,4 +543,4 @@ SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-2023031216
 SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = 
28985
 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106
 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567
-SIZE (osv-scanner-v1.4.1.zip) = 2081963
+SIZE (osv-scanner-v1.4.3.zip) = 2105180
blob - c7c1ab632d686d4aae5467b432af2b1910aed60a
file + security/osv-scanner/modules.inc
--- security/osv-scanner/modules.inc
+++ security/osv-scanner/modules.inc
@@ -13,7 +13,6 @@ MODGO_MODULES =       \
        github.com/bwesterb/go-ristretto                 v1.2.3 \
        github.com/cloudflare/circl                      v1.3.3 \
        github.com/cpuguy83/go-md2man/v2                 v2.0.2 \
-       github.com/creack/pty                            v1.1.9 \
        github.com/cyphar/filepath-securejoin            v0.2.4 \
        github.com/davecgh/go-spew                       v1.1.1 \
        github.com/elazarl/goproxy                       
v0.0.0-20230808193330-2592e75ae04a \
@@ -21,19 +20,19 @@ MODGO_MODULES =     \
        github.com/gliderlabs/ssh                        v0.3.5 \
        github.com/go-git/gcfg                           
v1.5.1-0.20230307220236-3a3c6141e376 \
        github.com/go-git/go-billy/v5                    v5.5.0 \
-       github.com/go-git/go-git-fixtures/v4             
v4.3.2-0.20230305113008-0c11038e723f \
-       github.com/go-git/go-git/v5                      v5.9.0 \
+       github.com/go-git/go-git-fixtures/v4             
v4.3.2-0.20231010084843-55a94097c399 \
+       github.com/go-git/go-git/v5                      v5.10.0 \
        github.com/goark/errs                            v1.3.2 \
        github.com/goark/go-cvss                         v1.6.6 \
        github.com/golang/groupcache                     
v0.0.0-20210331224755-41bb18bfe9da \
        github.com/golang/protobuf                       v1.3.4 \
        github.com/google/go-cmdtest                     
v0.4.1-0.20220921163831-55ab3332a786 \
-       github.com/google/go-cmp                         v0.5.9 \
+       github.com/google/go-cmp                         v0.6.0 \
        github.com/google/renameio                       v0.1.0 \
        github.com/hexops/gotextdiff                     v1.0.3 \
-       github.com/ianlancetaylor/demangle               
v0.0.0-20230524184225-eabc099b10ab \
+       github.com/ianlancetaylor/demangle               
v0.0.0-20231023195312-e2daf7ba7156 \
        github.com/jbenet/go-context                     
v0.0.0-20150711004518-d14ea06fba99 \
-       github.com/jedib0t/go-pretty/v6                  v6.4.7 \
+       github.com/jedib0t/go-pretty/v6                  v6.4.9 \
        github.com/jessevdk/go-flags                     v1.5.0 \
        github.com/kevinburke/ssh_config                 v1.2.0 \
        github.com/kr/pretty                             v0.3.1 \
@@ -44,10 +43,9 @@ MODGO_MODULES =      \
        github.com/mmcloughlin/avo                       v0.5.0 \
        github.com/onsi/gomega                           v1.27.10 \
        github.com/owenrumney/go-sarif                   v1.1.1 \
-       github.com/owenrumney/go-sarif/v2                v2.2.2 \
-       github.com/package-url/packageurl-go             v0.1.1 \
+       github.com/owenrumney/go-sarif/v2                v2.3.0 \
+       github.com/package-url/packageurl-go             v0.1.2 \
        github.com/pjbgf/sha1cd                          v0.3.0 \
-       github.com/pkg/diff                              
v0.0.0-20210226163009-20ebb0f2a09e \
        github.com/pkg/errors                            v0.9.1 \
        github.com/pkg/profile                           v1.6.0 \
        github.com/pmezard/go-difflib                    v1.0.0 \
@@ -72,15 +70,15 @@ MODGO_MODULES =     \
        github.com/xrash/smetrics                        
v0.0.0-20201216005158-039620a65673 \
        github.com/yuin/goldmark                         v1.4.13 \
        github.com/zclconf/go-cty                        v1.10.0 \
-       golang.org/x/crypto                              v0.13.0 \
-       golang.org/x/exp                                 
v0.0.0-20230905200255-921286631fa9 \
-       golang.org/x/mod                                 v0.12.0 \
-       golang.org/x/net                                 v0.15.0 \
-       golang.org/x/sync                                v0.3.0 \
-       golang.org/x/sys                                 v0.12.0 \
-       golang.org/x/term                                v0.12.0 \
+       golang.org/x/crypto                              v0.14.0 \
+       golang.org/x/exp                                 
v0.0.0-20231006140011-7918f672742d \
+       golang.org/x/mod                                 v0.13.0 \
+       golang.org/x/net                                 v0.17.0 \
+       golang.org/x/sync                                v0.4.0 \
+       golang.org/x/sys                                 v0.13.0 \
+       golang.org/x/term                                v0.13.0 \
        golang.org/x/text                                v0.13.0 \
-       golang.org/x/tools                               v0.13.0 \
+       golang.org/x/tools                               v0.14.0 \
        golang.org/x/vuln                                v1.0.1 \
        golang.org/x/xerrors                             
v0.0.0-20190717185122-a985d3407aa7 \
        google.golang.org/appengine                      v1.6.5 \
@@ -100,11 +98,11 @@ MODGO_MODFILES =   \
        github.com/golang/protobuf               v1.3.1 \
        github.com/google/go-cmp                 v0.3.1 \
        github.com/google/go-cmp                 v0.5.8 \
+       github.com/google/go-cmp                 v0.5.9 \
        github.com/kr/pretty                     v0.1.0 \
        github.com/kr/text                       v0.1.0 \
        github.com/mattn/go-runewidth            v0.0.13 \
        github.com/rivo/uniseg                   v0.2.0 \
-       github.com/rogpeppe/go-internal          v1.9.0 \
        github.com/sergi/go-diff                 v1.1.0 \
        github.com/sirupsen/logrus               v1.7.0 \
        github.com/skeema/knownhosts             v1.2.0 \
@@ -120,12 +118,13 @@ MODGO_MODFILES =  \
        golang.org/x/crypto                      
v0.0.0-20190308221718-c2843e01d9a2 \
        golang.org/x/crypto                      
v0.0.0-20210921155107-089bfa567519 \
        golang.org/x/crypto                      
v0.0.0-20220622213112-05595931fe9d \
+       golang.org/x/crypto                      v0.13.0 \
        golang.org/x/crypto                      
v0.3.1-0.20221117191849-2c476679df9a \
        golang.org/x/crypto                      v0.7.0 \
+       golang.org/x/mod                         v0.12.0 \
        golang.org/x/mod                         v0.6.0 \
        golang.org/x/mod                         
v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
        golang.org/x/mod                         v0.8.0 \
-       golang.org/x/mod                         v0.9.0 \
        golang.org/x/net                         
v0.0.0-20190603091049-60506f45cf65 \
        golang.org/x/net                         
v0.0.0-20190620200207-3b0461eec859 \
        golang.org/x/net                         
v0.0.0-20200301022130-244492dfa37a \
@@ -133,12 +132,15 @@ MODGO_MODFILES =  \
        golang.org/x/net                         
v0.0.0-20211112202133-69e39bad7dc2 \
        golang.org/x/net                         
v0.0.0-20220722155237-a158d28d115b \
        golang.org/x/net                         v0.10.0 \
+       golang.org/x/net                         v0.15.0 \
+       golang.org/x/net                         v0.16.0 \
        golang.org/x/net                         v0.2.0 \
        golang.org/x/net                         v0.6.0 \
        golang.org/x/net                         v0.8.0 \
        golang.org/x/sync                        
v0.0.0-20190423024810-112230192c58 \
        golang.org/x/sync                        
v0.0.0-20220722155255-886fb9371eb4 \
        golang.org/x/sync                        v0.1.0 \
+       golang.org/x/sync                        v0.3.0 \
        golang.org/x/sys                         
v0.0.0-20190215142949-d0b11bdaac8a \
        golang.org/x/sys                         
v0.0.0-20191026070338-33540a1f6037 \
        golang.org/x/sys                         
v0.0.0-20201119102817-f84b799fce68 \
@@ -150,6 +152,7 @@ MODGO_MODFILES =    \
        golang.org/x/sys                         
v0.0.0-20220722155257-8c9f86f7a55f \
        golang.org/x/sys                         v0.1.0 \
        golang.org/x/sys                         v0.11.0 \
+       golang.org/x/sys                         v0.12.0 \
        golang.org/x/sys                         v0.2.0 \
        golang.org/x/sys                         v0.3.0 \
        golang.org/x/sys                         v0.5.0 \
@@ -173,6 +176,7 @@ MODGO_MODFILES =    \
        golang.org/x/tools                       
v0.0.0-20191119224855-298f0cb1881e \
        golang.org/x/tools                       v0.1.12 \
        golang.org/x/tools                       
v0.12.1-0.20230815132531-74c255bcf846 \
+       golang.org/x/tools                       v0.13.0 \
        golang.org/x/tools                       v0.2.0 \
        golang.org/x/tools                       v0.6.0 \
        gopkg.in/check.v1                        
v0.0.0-20161208181325-20d25e280405 \

Reply via email to