Hello, Here's an update for osv-scanner that's been working fine (including the new git submodule support)
changelogs: v1.4.2: * Support versions with build metadata in yarn.lock files * Add name field to sarif rule output v1.4.3: * Add support for scanning vendored C/C++ files * Scan submodules commit hashes * Fix gitignore matching for root directory * Go binary not found should not be an error * handle npm/yarn aliased packages * fix: remove some extra newlines in sarif report Thanks, Lucas
diff /usr/ports commit - c5b77b092bde2d474d0936a40ab5ec96b1cb48f7 path + /usr/ports blob - 51165235f2fa2657378a1493cf4fcd70650c2174 file + security/osv-scanner/Makefile --- security/osv-scanner/Makefile +++ security/osv-scanner/Makefile @@ -6,7 +6,7 @@ ONLY_FOR_ARCHS = aarch64 amd64 mips64 riscv64 COMMENT = scan your project's dependencies for vulnerabilities -V = 1.4.1 +V = 1.4.3 MODGO_MODNAME = github.com/google/osv-scanner MODGO_VERSION = v${V} blob - 1c3905fdd57e69db79743785e482ca3635c5dc5e file + security/osv-scanner/distinfo --- security/osv-scanner/distinfo +++ security/osv-scanner/distinfo @@ -29,8 +29,6 @@ SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3 SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = XhGMBQbVxujLM33jULSE2jRUQIXNpV0xFKPm9DJSjfQ= SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro= SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I= -SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE= -SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = IO38wnr9eZF4C8kcpSPSaZnqAl5B9gvF7XG7rADhdeI= SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 3H2HZHOPLSMbofLvWkVzpI/kD2Rby4spHkIGljRXJTc= SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = CvlOtZEz/aaf0ETa/6fWK6Do0nFtT7HEJPPirWNtPjQ= SHA256 (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = vLKTkyUSN7eaF7bBm/KRNPQ+j0OMMZiYj81GGhzfBcw= @@ -46,10 +44,10 @@ SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0. SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.zip) = TNZ2ieEIz9ZUWRxKf2k6xREGNKc9q8EmhvsHhUVWxIA= SHA256 (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.mod) = lV2KV4w4+tlp0uW3oYjvDE6NEq5azxIpEqlM5Uh0cWo= SHA256 (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.zip) = KIxMaIK/qHg/E58+1XCdSrsTjWvlCmWKTbyH67LS5pQ= -SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.mod) = P5LuI7zdrhBsbU6/lS5IJGZxxU6Sy6B8Uv1khnclPT8= -SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.zip) = VGUYT34LRmv9QlPdoE+76oPV2/QE59cfT/oUXXXXFGM= -SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.mod) = wJJgbd9+TN6sXn1bjVSgKzCZc0ySrRBcdW/4p5PAItk= -SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.zip) = Hh03DZU89oEd4/7AkKDD3+dMafID5Ri5hxiicFSaiQ4= +SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.mod) = C9xCgRy2U3CjDmfM2uzn1dth3TWm3IJzwPUVQy+XQkc= +SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.zip) = UJGBEWUTNQAc1YN7pxKDZHuquRGEKiDSMzgRSHUhAMI= +SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.mod) = ib4t+Sx7klpfqDckWNZqr2yUT5A/i0p0grMulsxycRQ= +SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.zip) = NnUgxLo3HcUpkZ2G+5Fbjb0eEEp1V803tvePYKmhgUY= SHA256 (go_modules/github.com/goark/errs/@v/v1.1.0.mod) = HdP0dfT4+GCMG+9lWyqNew4gr5jOusFXVZMrCapncEY= SHA256 (go_modules/github.com/goark/errs/@v/v1.3.2.mod) = HyYYh2yL2wkHf1o8JI8FIoQ2HhL70Wd4Xb3DJevmEVk= SHA256 (go_modules/github.com/goark/errs/@v/v1.3.2.zip) = BHp53f/b9ic2FYTMDiUcoh+KFlVZDQPKyp+B+No8sH0= @@ -65,17 +63,18 @@ SHA256 (go_modules/github.com/google/go-cmdtest/@v/v0. SHA256 (go_modules/github.com/google/go-cmp/@v/v0.3.1.mod) = gd95F8Ilqdp2BLIw2VL6J4xgqIMsENeZOF0TSwXVsIc= SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0= SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0= -SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = MkUIdKx1bvXUf2uBkwUQUwS5gZBFoW4/EFKJt88lLFE= +SHA256 (go_modules/github.com/google/go-cmp/@v/v0.6.0.mod) = 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0= +SHA256 (go_modules/github.com/google/go-cmp/@v/v0.6.0.zip) = S06b9sSCEQgGUbSR37SNaLc2xmowW8+UYFYG4bouqko= SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.mod) = uptesIeACKiR4WsIwXkisD+Sx2oD57/hgyY16tocGjU= SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = uFELs0B4aRoguOSQLTca/g6xcbLa+VP2fLOWDRkmzPM= SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = qUfdi3h5PdOY6iCt7h99M8zydn2/juazzXe3Hxnm+5s= SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = oQw5QvCbxRMiaNItS7nQwYSRItUz/ozfZepp2gXOu68= -SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw= -SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.zip) = tkJqMvfQUlxqYBKlvnsUulelmBDZSfrbO/7CL2ZgTKw= +SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw= +SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = aaRXXHjLCWywU1ZUDt/6cm2iBsql/heJ1iZx0wj0pUg= SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 4+87N7MKDkMiuzbTB2k2Og1Dv0YszdpGT6Y4YtFpT5c= SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = TNCVWr7qQ9xLWgi4dp5pYQngN28qETqbjv8TzJDKwcc= -SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.mod) = 6XoX8CAsLf1TKpse+ECQWFEbotc5iRW95KfBuuQUDpw= -SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.zip) = RxvkkXvRlhHh/qANfVs3d063Xz9pyhBbuccXGcChwf4= +SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.mod) = 6XoX8CAsLf1TKpse+ECQWFEbotc5iRW95KfBuuQUDpw= +SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.zip) = AQCeQL/6/nrwhR5hX3OWWf301R4cHIbJhJroE5tjwH0= SHA256 (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.mod) = diFB8mquOK84YY9/UPtIZyw5q64Qj5Kyi9OwAvK/h28= SHA256 (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.zip) = mIY3mowx+QIc5oSQ4qIb2+p+X+lVMyKWUOGsFXHc14o= SHA256 (go_modules/github.com/kevinburke/ssh_config/@v/v1.2.0.mod) = 2yQHDzYdFcUiAaC7wPRxbgz1QOSb1/uzaETFkS+Xk88= @@ -99,14 +98,12 @@ SHA256 (go_modules/github.com/onsi/gomega/@v/v1.27.10. SHA256 (go_modules/github.com/onsi/gomega/@v/v1.27.10.zip) = p3Q2xyJdqRsCNyOrDq82KnSH5BThglYyWp5h2n8d0WQ= SHA256 (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.mod) = USsTAHBx6uHHFLSwFOm30iws5/CoWkNhkwNbfJ9us4g= SHA256 (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.zip) = B/aTZBUo1iga3QwLEcIOkHFKNPTazEWb+324yAV2+e0= -SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.mod) = ZPuUC3bJFGNZ1JnFQ1uBLuW/9xi/xl7iqWvb6Y1SUuA= -SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.zip) = 1jdGbQrXUfTuHKi6eCpT23nxvnnBxhIbR+MIo0NY6U8= -SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.mod) = WtMu4++y8MyV5RLpaxj2GWiBXwXLTpBVYacq5IyrWtE= -SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.zip) = E4RHGgDw4CbF5F2fzMDaNj6UIyZ875M5jbFvzyS9uGA= +SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.mod) = ZPuUC3bJFGNZ1JnFQ1uBLuW/9xi/xl7iqWvb6Y1SUuA= +SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.zip) = p1xn5KEN/lyl7VTwnA0F2DsOgSBPJ8G1FnjEcVsjSUg= +SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.mod) = WtMu4++y8MyV5RLpaxj2GWiBXwXLTpBVYacq5IyrWtE= +SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.zip) = h/S4WfKmtkkuGsd5SX9bzE57MUaBk64uCrNAcAuT5bc= SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 8Qo2tGIntPuz5pD2zHJtlGR18xZp7rxSxK1bLombToA= SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = rP7pbdL+jmrgiumGRQSDCknSNddMKrk996XfopqQpGE= -SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = XVuUVOLQIK8MdgNWjoaQS5m+/E1dZ8OoUF9hIVib0R8= -SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 81sj/dK5Ui3dRsxcAWG08HZcUUR11dTKKoasoxOIyL0= SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 3yjGqCPxgddheWlxd8DFlDxv+zjzwQstxTvjYO59RYk= SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 1MNri80GFikKORMhXg9TuTG9bgBnBZbylg3xtEryvQc= SHA256 (go_modules/github.com/pkg/profile/@v/v1.6.0.mod) = BuBr9ahImE+FnbIYGOY0Xb1D+3SRWDdAS8AbYcfnwBY= @@ -118,7 +115,6 @@ SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mo SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = dAzVgDEE763yd6DzUZ8OrZfjIdvZCc7uvXyLaza0R1Q= SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = zRKUMvaTrNtOkSxjkyyxIG1UWcjboC3sG0GPgH3LeOs= SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = NinUsuRX/bpenVGjduK+rZsoogaW+pBbcBx5JQGIxOM= -SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = kFmpfaKZDIGaCXZ6XpvYeEtFpXt6JeKQVbvRsKqhRP8= SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = w5VHzOboZujPo5XSk3vOMIAc0H8LkBwhMySPH7oS9Y0= SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = eFJ1DVigU844sB8sIDIIgXVk9VLr83GytjAIHXAExq4= SHA256 (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = IObs3/d7hGk4Nbl4uKFvbCK3hVlisjQQPV63SBi+RB8= @@ -173,17 +169,18 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20190 SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20210921155107-089bfa567519.mod) = zWMRYSoqpNDX4DxBs6ofvC1fiVqz9hCJ+rgL/p+PVIU= SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s= SHA256 (go_modules/golang.org/x/crypto/@v/v0.13.0.mod) = 5/Nu6cqqredrdWX8aGItzI/a9tBd3uPn1cyuSWiNn00= -SHA256 (go_modules/golang.org/x/crypto/@v/v0.13.0.zip) = tY2QL0in9ZWihYm27UvoteLuGjSW7KR3A56A625+ulc= +SHA256 (go_modules/golang.org/x/crypto/@v/v0.14.0.mod) = M2oiBGbrPO1R60SJdioyZKXPtstxA1iHAJZmAJmpyqc= +SHA256 (go_modules/golang.org/x/crypto/@v/v0.14.0.zip) = pyxX5x0PvUYNhJPJWPsoQTV+O6u7Mtf+LNUzVksdZrc= SHA256 (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk= SHA256 (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = yJ/iLnPawmoAplasEf9MbhprbNKrzFftzazew/va2C0= -SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.mod) = ko2BpDwXWlBsQQHgDgyVBo2xBccjjEVal9AqHKHaXn0= -SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.zip) = 54mSGiA2le3w0b/8mLD3a1+aJkwviO8ISi6pp2gIH4U= +SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.mod) = DV+cioupmmBfXQI2ZevcZujjjdf2tlVb0/C6CcbiLvQ= +SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.zip) = I1h7kTQ7ELe6YpK7Q1RiQIapxtzmXj59h48oqEYhJF0= SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ= -SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.zip) = ebf3n2i8gt/V3l9Yxam0dQEgvBsV+yAaGfJ/HX+071U= +SHA256 (go_modules/golang.org/x/mod/@v/v0.13.0.mod) = XErAMQolMwdXA5zPOpjnX+/by31ETd0EkjAAOkSUW94= +SHA256 (go_modules/golang.org/x/mod/@v/v0.13.0.zip) = H48DlcU3L/SbklZY4M/jooihotyRk7dmLhh/3rqcsWg= SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM= SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = mfQKUOjWDCWZrEXGzix21VSoQorNE8LGikk/ymGbT6g= SHA256 (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ= -SHA256 (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ= SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = br6z+vsJYS0+8f8EE9+qwFu6+PIpq94K4OASKY3+ZwI= SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo= SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo= @@ -192,7 +189,9 @@ SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20211112 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) = sxXFJkfS2i925c2502fh1nJ3hCNqm/+2EhkrGbEKEo0= SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 07fiNv8J5jIr5IkXAhbgGNMiGGLxoFPctj5T6rhTPBc= SHA256 (go_modules/golang.org/x/net/@v/v0.15.0.mod) = PRBkbW8I2OioVtbyLyzXBsPivgES63dyY8/ROSx25LQ= -SHA256 (go_modules/golang.org/x/net/@v/v0.15.0.zip) = 6JGUHwqD38hfgpkOKcvxk53KWVLQQkFmbIoifUGf3tM= +SHA256 (go_modules/golang.org/x/net/@v/v0.16.0.mod) = y6YYS4uODVRWC/WmXxNszXanNMScBm7YA+twvQbBdpY= +SHA256 (go_modules/golang.org/x/net/@v/v0.17.0.mod) = y6YYS4uODVRWC/WmXxNszXanNMScBm7YA+twvQbBdpY= +SHA256 (go_modules/golang.org/x/net/@v/v0.17.0.zip) = 2ZQo6Vr2/Y/cIyhdabj258UslkyZApXkUYNxjjPr61o= SHA256 (go_modules/golang.org/x/net/@v/v0.2.0.mod) = B+xkXjNT/CZz8tje5cFOuSi5wTEnpAn+PsQOq6Tb2zA= SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) = Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs= SHA256 (go_modules/golang.org/x/net/@v/v0.8.0.mod) = 6275vWQFrOPZnkOB0CVs5B+Dxm0aILTigwpMd2JF9xo= @@ -200,7 +199,8 @@ SHA256 (go_modules/golang.org/x/sync/@v/v0.0.0-2019042 SHA256 (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw= SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw= SHA256 (go_modules/golang.org/x/sync/@v/v0.3.0.mod) = 7Q/wxQgadUz8vnaMvPYMY5dbNddufXuZxayb+m2YKFE= -SHA256 (go_modules/golang.org/x/sync/@v/v0.3.0.zip) = GHDnoZb3EZ1Mbtun3pzfxJ7hPIy3kh86lHVoFxxhUuA= +SHA256 (go_modules/golang.org/x/sync/@v/v0.4.0.mod) = 7Q/wxQgadUz8vnaMvPYMY5dbNddufXuZxayb+m2YKFE= +SHA256 (go_modules/golang.org/x/sync/@v/v0.4.0.zip) = d8XZxIuhxEAGDIfZobZ/LvUhaZQijhStP8/i3Zs/ITQ= SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) = iWkRXko5EIhIMk55ob2KhEUjDm46rMvp+AV/tQ//yME= SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) = GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M= SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20201119102817-f84b799fce68.mod) = GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M= @@ -213,15 +213,16 @@ SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20220722 SHA256 (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= SHA256 (go_modules/golang.org/x/sys/@v/v0.11.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= SHA256 (go_modules/golang.org/x/sys/@v/v0.12.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= -SHA256 (go_modules/golang.org/x/sys/@v/v0.12.0.zip) = iSJdnmYDwJD/2TKGt8oSSEn63+QyDDsYpr3MxKwIZyw= +SHA256 (go_modules/golang.org/x/sys/@v/v0.13.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= +SHA256 (go_modules/golang.org/x/sys/@v/v0.13.0.zip) = PRSa/Jk5mANUN0wNR0Ydzb0dOYDrL3fmAwSyP+5vPTc= SHA256 (go_modules/golang.org/x/sys/@v/v0.2.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= SHA256 (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= SHA256 (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= SHA256 (go_modules/golang.org/x/sys/@v/v0.6.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ= SHA256 (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = TLqxT3cGdxsnHZlaGzzBMf5aJGqtx+5tG6bwvYlHgfo= SHA256 (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s= -SHA256 (go_modules/golang.org/x/term/@v/v0.12.0.mod) = wpIGWJdMmcgFJ4+azIRDYmbw9101cToIjB80DiZFM10= -SHA256 (go_modules/golang.org/x/term/@v/v0.12.0.zip) = 9LvEuqDJsFP30lKwbk6Lqr1oapqH2CAls0F5binznGA= +SHA256 (go_modules/golang.org/x/term/@v/v0.13.0.mod) = Jid7C1vDPQJB8jN4OeimY9KmxgMFiHDyfO2d8f7n41c= +SHA256 (go_modules/golang.org/x/term/@v/v0.13.0.zip) = ohQBM6te3qSG7JI52gGZXmBuYmHWbRpnPNKt0z0ID90= SHA256 (go_modules/golang.org/x/term/@v/v0.2.0.mod) = 7fgz2hAZAP4s6NsjQJ5CRI9EGJjT19juRRmI47MMkwI= SHA256 (go_modules/golang.org/x/term/@v/v0.5.0.mod) = DW9YIoqtwaZSjmdV2gGFFlZuOuXFIB963hdz9W+o2TQ= SHA256 (go_modules/golang.org/x/term/@v/v0.6.0.mod) = ZDWbnGU3CEePAgcpiFBE/z2ABxhtnUQRJf6HSBfnEgE= @@ -242,7 +243,8 @@ SHA256 (go_modules/golang.org/x/tools/@v/v0.0.0-201911 SHA256 (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = KouTZYmPCCL6zmW6CJoTU+aKZdNC8wDKMXzOzN5kIfM= SHA256 (go_modules/golang.org/x/tools/@v/v0.12.1-0.20230815132531-74c255bcf846.mod) = 8ntM++BBE9T76CEuqUR3Q/vRDuxPOYipcdWhwKK6Crs= SHA256 (go_modules/golang.org/x/tools/@v/v0.13.0.mod) = FCs0FrAOghO0CeJ5pDS5emzglTHJFMG0cXh4FX1Xmj8= -SHA256 (go_modules/golang.org/x/tools/@v/v0.13.0.zip) = b9HiUBEiFXCUVEaOrVPDHFJLBcyQpi7YF9DUeA/bZCk= +SHA256 (go_modules/golang.org/x/tools/@v/v0.14.0.mod) = pdITAroFd4OVj1r/cpV+0ovqJT4vcH8bQqI98jt+CD8= +SHA256 (go_modules/golang.org/x/tools/@v/v0.14.0.zip) = Hk7I++U5Xq4ZI+Kbc0IkEIuTMIa7TUbQO6ttVHnFQkI= SHA256 (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = nJteYq9p8rEAKc4SlE3Ig08SJqg7skPpoNvzfguxhro= SHA256 (go_modules/golang.org/x/tools/@v/v0.6.0.mod) = gw7Xjc0+mSfEEuJkEjAwhEd0nVE9MQJNJ24kQ7IBZgk= SHA256 (go_modules/golang.org/x/vuln/@v/v1.0.1.mod) = SeGrgKrGADpn8mJTvUItgIa6TUOiI0YxwAjWkiMKVa8= @@ -268,7 +270,7 @@ SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312 SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = m1xb4Hh4qr/7KDXx3UhPUC/y64MhLl7fxmYXlz55hio= SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE= SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk= -SHA256 (osv-scanner-v1.4.1.zip) = LZpHavtemsCOWnUsaLU1T9YVHaAW5/MsTvaYUd3D5R0= +SHA256 (osv-scanner-v1.4.3.zip) = gGbMvcS614X0Nk0ZbMqibrYtuTIcs+mpHafD4ItK3cQ= SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 65 SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = 49320 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = 43 @@ -300,8 +302,6 @@ SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3 SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 4909858 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539 -SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39 -SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = 19440 SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 54 SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = 9553 SIZE (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = 34 @@ -317,10 +317,10 @@ SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20 SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.zip) = 41846 SIZE (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.mod) = 573 SIZE (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.zip) = 59927 -SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.mod) = 194 -SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.zip) = 98071761 -SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.mod) = 1640 -SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.zip) = 693750 +SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.mod) = 509 +SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.zip) = 98219866 +SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.mod) = 1640 +SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.zip) = 725516 SIZE (go_modules/github.com/goark/errs/@v/v1.1.0.mod) = 38 SIZE (go_modules/github.com/goark/errs/@v/v1.3.2.mod) = 38 SIZE (go_modules/github.com/goark/errs/@v/v1.3.2.zip) = 21778 @@ -336,17 +336,18 @@ SIZE (go_modules/github.com/google/go-cmdtest/@v/v0.4. SIZE (go_modules/github.com/google/go-cmp/@v/v0.3.1.mod) = 40 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 41 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 41 -SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 130220 +SIZE (go_modules/github.com/google/go-cmp/@v/v0.6.0.mod) = 41 +SIZE (go_modules/github.com/google/go-cmp/@v/v0.6.0.zip) = 129773 SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.mod) = 34 SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = 14941 SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = 45 SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = 33608 -SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.mod) = 51 -SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.zip) = 695790 +SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = 51 +SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = 696032 SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 36 SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = 8654 -SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.mod) = 192 -SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.zip) = 790460 +SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.mod) = 192 +SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.zip) = 794070 SIZE (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.mod) = 106 SIZE (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.zip) = 77449 SIZE (go_modules/github.com/kevinburke/ssh_config/@v/v1.2.0.mod) = 40 @@ -370,14 +371,12 @@ SIZE (go_modules/github.com/onsi/gomega/@v/v1.27.10.mo SIZE (go_modules/github.com/onsi/gomega/@v/v1.27.10.zip) = 420749 SIZE (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.mod) = 131 SIZE (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.zip) = 37561 -SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.mod) = 138 -SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.zip) = 56051 -SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.mod) = 53 -SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.zip) = 15275 +SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.mod) = 138 +SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.zip) = 56185 +SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.mod) = 53 +SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.zip) = 17038 SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 213 SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = 3528787 -SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = 36 -SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 219375 SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 29 SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 17866 SIZE (go_modules/github.com/pkg/profile/@v/v1.6.0.mod) = 39 @@ -389,7 +388,6 @@ SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mod) SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = 476937 SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = 167 SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = 183284 -SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = 112 SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = 42 SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = 122358 SIZE (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = 281 @@ -444,17 +442,18 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-2019030 SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-20210921155107-089bfa567519.mod) = 247 SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = 255 SIZE (go_modules/golang.org/x/crypto/@v/v0.13.0.mod) = 190 -SIZE (go_modules/golang.org/x/crypto/@v/v0.13.0.zip) = 1785967 +SIZE (go_modules/golang.org/x/crypto/@v/v0.14.0.mod) = 190 +SIZE (go_modules/golang.org/x/crypto/@v/v0.14.0.zip) = 1791629 SIZE (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 171 SIZE (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = 171 -SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.mod) = 179 -SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.zip) = 462986 +SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.mod) = 179 +SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.zip) = 462987 SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = 84 -SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.zip) = 166176 +SIZE (go_modules/golang.org/x/mod/@v/v0.13.0.mod) = 84 +SIZE (go_modules/golang.org/x/mod/@v/v0.13.0.zip) = 165088 SIZE (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 157 SIZE (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = 117 SIZE (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = 84 -SIZE (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = 84 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = 172 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 181 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 181 @@ -463,7 +462,9 @@ SIZE (go_modules/golang.org/x/net/@v/v0.0.0-2021111220 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) = 179 SIZE (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 123 SIZE (go_modules/golang.org/x/net/@v/v0.15.0.mod) = 155 -SIZE (go_modules/golang.org/x/net/@v/v0.15.0.zip) = 1791878 +SIZE (go_modules/golang.org/x/net/@v/v0.16.0.mod) = 155 +SIZE (go_modules/golang.org/x/net/@v/v0.17.0.mod) = 155 +SIZE (go_modules/golang.org/x/net/@v/v0.17.0.zip) = 1824828 SIZE (go_modules/golang.org/x/net/@v/v0.2.0.mod) = 123 SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123 SIZE (go_modules/golang.org/x/net/@v/v0.8.0.mod) = 123 @@ -471,7 +472,8 @@ SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-201904230 SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = 25 SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 25 SIZE (go_modules/golang.org/x/sync/@v/v0.3.0.mod) = 34 -SIZE (go_modules/golang.org/x/sync/@v/v0.3.0.zip) = 29766 +SIZE (go_modules/golang.org/x/sync/@v/v0.4.0.mod) = 34 +SIZE (go_modules/golang.org/x/sync/@v/v0.4.0.zip) = 30186 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) = 24 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) = 33 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20201119102817-f84b799fce68.mod) = 33 @@ -484,15 +486,16 @@ SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-2022072215 SIZE (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 33 SIZE (go_modules/golang.org/x/sys/@v/v0.11.0.mod) = 33 SIZE (go_modules/golang.org/x/sys/@v/v0.12.0.mod) = 33 -SIZE (go_modules/golang.org/x/sys/@v/v0.12.0.zip) = 1908262 +SIZE (go_modules/golang.org/x/sys/@v/v0.13.0.mod) = 33 +SIZE (go_modules/golang.org/x/sys/@v/v0.13.0.zip) = 1901653 SIZE (go_modules/golang.org/x/sys/@v/v0.2.0.mod) = 33 SIZE (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 33 SIZE (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 33 SIZE (go_modules/golang.org/x/sys/@v/v0.6.0.mod) = 33 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = 95 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = 95 -SIZE (go_modules/golang.org/x/term/@v/v0.12.0.mod) = 68 -SIZE (go_modules/golang.org/x/term/@v/v0.12.0.zip) = 19958 +SIZE (go_modules/golang.org/x/term/@v/v0.13.0.mod) = 68 +SIZE (go_modules/golang.org/x/term/@v/v0.13.0.zip) = 19958 SIZE (go_modules/golang.org/x/term/@v/v0.2.0.mod) = 67 SIZE (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 67 SIZE (go_modules/golang.org/x/term/@v/v0.6.0.mod) = 67 @@ -513,7 +516,8 @@ SIZE (go_modules/golang.org/x/tools/@v/v0.0.0-20191119 SIZE (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 327 SIZE (go_modules/golang.org/x/tools/@v/v0.12.1-0.20230815132531-74c255bcf846.mod) = 214 SIZE (go_modules/golang.org/x/tools/@v/v0.13.0.mod) = 214 -SIZE (go_modules/golang.org/x/tools/@v/v0.13.0.zip) = 3071376 +SIZE (go_modules/golang.org/x/tools/@v/v0.14.0.mod) = 194 +SIZE (go_modules/golang.org/x/tools/@v/v0.14.0.zip) = 3138694 SIZE (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 177 SIZE (go_modules/golang.org/x/tools/@v/v0.6.0.mod) = 211 SIZE (go_modules/golang.org/x/vuln/@v/v1.0.1.mod) = 408 @@ -539,4 +543,4 @@ SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-2023031216 SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = 28985 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567 -SIZE (osv-scanner-v1.4.1.zip) = 2081963 +SIZE (osv-scanner-v1.4.3.zip) = 2105180 blob - c7c1ab632d686d4aae5467b432af2b1910aed60a file + security/osv-scanner/modules.inc --- security/osv-scanner/modules.inc +++ security/osv-scanner/modules.inc @@ -13,7 +13,6 @@ MODGO_MODULES = \ github.com/bwesterb/go-ristretto v1.2.3 \ github.com/cloudflare/circl v1.3.3 \ github.com/cpuguy83/go-md2man/v2 v2.0.2 \ - github.com/creack/pty v1.1.9 \ github.com/cyphar/filepath-securejoin v0.2.4 \ github.com/davecgh/go-spew v1.1.1 \ github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a \ @@ -21,19 +20,19 @@ MODGO_MODULES = \ github.com/gliderlabs/ssh v0.3.5 \ github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 \ github.com/go-git/go-billy/v5 v5.5.0 \ - github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20230305113008-0c11038e723f \ - github.com/go-git/go-git/v5 v5.9.0 \ + github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 \ + github.com/go-git/go-git/v5 v5.10.0 \ github.com/goark/errs v1.3.2 \ github.com/goark/go-cvss v1.6.6 \ github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da \ github.com/golang/protobuf v1.3.4 \ github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786 \ - github.com/google/go-cmp v0.5.9 \ + github.com/google/go-cmp v0.6.0 \ github.com/google/renameio v0.1.0 \ github.com/hexops/gotextdiff v1.0.3 \ - github.com/ianlancetaylor/demangle v0.0.0-20230524184225-eabc099b10ab \ + github.com/ianlancetaylor/demangle v0.0.0-20231023195312-e2daf7ba7156 \ github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 \ - github.com/jedib0t/go-pretty/v6 v6.4.7 \ + github.com/jedib0t/go-pretty/v6 v6.4.9 \ github.com/jessevdk/go-flags v1.5.0 \ github.com/kevinburke/ssh_config v1.2.0 \ github.com/kr/pretty v0.3.1 \ @@ -44,10 +43,9 @@ MODGO_MODULES = \ github.com/mmcloughlin/avo v0.5.0 \ github.com/onsi/gomega v1.27.10 \ github.com/owenrumney/go-sarif v1.1.1 \ - github.com/owenrumney/go-sarif/v2 v2.2.2 \ - github.com/package-url/packageurl-go v0.1.1 \ + github.com/owenrumney/go-sarif/v2 v2.3.0 \ + github.com/package-url/packageurl-go v0.1.2 \ github.com/pjbgf/sha1cd v0.3.0 \ - github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e \ github.com/pkg/errors v0.9.1 \ github.com/pkg/profile v1.6.0 \ github.com/pmezard/go-difflib v1.0.0 \ @@ -72,15 +70,15 @@ MODGO_MODULES = \ github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 \ github.com/yuin/goldmark v1.4.13 \ github.com/zclconf/go-cty v1.10.0 \ - golang.org/x/crypto v0.13.0 \ - golang.org/x/exp v0.0.0-20230905200255-921286631fa9 \ - golang.org/x/mod v0.12.0 \ - golang.org/x/net v0.15.0 \ - golang.org/x/sync v0.3.0 \ - golang.org/x/sys v0.12.0 \ - golang.org/x/term v0.12.0 \ + golang.org/x/crypto v0.14.0 \ + golang.org/x/exp v0.0.0-20231006140011-7918f672742d \ + golang.org/x/mod v0.13.0 \ + golang.org/x/net v0.17.0 \ + golang.org/x/sync v0.4.0 \ + golang.org/x/sys v0.13.0 \ + golang.org/x/term v0.13.0 \ golang.org/x/text v0.13.0 \ - golang.org/x/tools v0.13.0 \ + golang.org/x/tools v0.14.0 \ golang.org/x/vuln v1.0.1 \ golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7 \ google.golang.org/appengine v1.6.5 \ @@ -100,11 +98,11 @@ MODGO_MODFILES = \ github.com/golang/protobuf v1.3.1 \ github.com/google/go-cmp v0.3.1 \ github.com/google/go-cmp v0.5.8 \ + github.com/google/go-cmp v0.5.9 \ github.com/kr/pretty v0.1.0 \ github.com/kr/text v0.1.0 \ github.com/mattn/go-runewidth v0.0.13 \ github.com/rivo/uniseg v0.2.0 \ - github.com/rogpeppe/go-internal v1.9.0 \ github.com/sergi/go-diff v1.1.0 \ github.com/sirupsen/logrus v1.7.0 \ github.com/skeema/knownhosts v1.2.0 \ @@ -120,12 +118,13 @@ MODGO_MODFILES = \ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 \ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 \ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d \ + golang.org/x/crypto v0.13.0 \ golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a \ golang.org/x/crypto v0.7.0 \ + golang.org/x/mod v0.12.0 \ golang.org/x/mod v0.6.0 \ golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 \ golang.org/x/mod v0.8.0 \ - golang.org/x/mod v0.9.0 \ golang.org/x/net v0.0.0-20190603091049-60506f45cf65 \ golang.org/x/net v0.0.0-20190620200207-3b0461eec859 \ golang.org/x/net v0.0.0-20200301022130-244492dfa37a \ @@ -133,12 +132,15 @@ MODGO_MODFILES = \ golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 \ golang.org/x/net v0.0.0-20220722155237-a158d28d115b \ golang.org/x/net v0.10.0 \ + golang.org/x/net v0.15.0 \ + golang.org/x/net v0.16.0 \ golang.org/x/net v0.2.0 \ golang.org/x/net v0.6.0 \ golang.org/x/net v0.8.0 \ golang.org/x/sync v0.0.0-20190423024810-112230192c58 \ golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 \ golang.org/x/sync v0.1.0 \ + golang.org/x/sync v0.3.0 \ golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a \ golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 \ golang.org/x/sys v0.0.0-20201119102817-f84b799fce68 \ @@ -150,6 +152,7 @@ MODGO_MODFILES = \ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f \ golang.org/x/sys v0.1.0 \ golang.org/x/sys v0.11.0 \ + golang.org/x/sys v0.12.0 \ golang.org/x/sys v0.2.0 \ golang.org/x/sys v0.3.0 \ golang.org/x/sys v0.5.0 \ @@ -173,6 +176,7 @@ MODGO_MODFILES = \ golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e \ golang.org/x/tools v0.1.12 \ golang.org/x/tools v0.12.1-0.20230815132531-74c255bcf846 \ + golang.org/x/tools v0.13.0 \ golang.org/x/tools v0.2.0 \ golang.org/x/tools v0.6.0 \ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 \