Saturday, November 04, 2023

[update] security/osv-scanner to 1.4.3

diff /usr/ports
commit - c5b77b092bde2d474d0936a40ab5ec96b1cb48f7
path + /usr/ports
blob - 51165235f2fa2657378a1493cf4fcd70650c2174
file + security/osv-scanner/Makefile
--- security/osv-scanner/Makefile
+++ security/osv-scanner/Makefile
@@ -6,7 +6,7 @@ ONLY_FOR_ARCHS = aarch64 amd64 mips64 riscv64

COMMENT = scan your project's dependencies for vulnerabilities

-V = 1.4.1
+V = 1.4.3
MODGO_MODNAME = github.com/google/osv-scanner
MODGO_VERSION = v${V}

blob - 1c3905fdd57e69db79743785e482ca3635c5dc5e
file + security/osv-scanner/distinfo
--- security/osv-scanner/distinfo
+++ security/osv-scanner/distinfo
@@ -29,8 +29,6 @@ SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3
SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = XhGMBQbVxujLM33jULSE2jRUQIXNpV0xFKPm9DJSjfQ=
SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro=
SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I=
-SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE=
-SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = IO38wnr9eZF4C8kcpSPSaZnqAl5B9gvF7XG7rADhdeI=
SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 3H2HZHOPLSMbofLvWkVzpI/kD2Rby4spHkIGljRXJTc=
SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = CvlOtZEz/aaf0ETa/6fWK6Do0nFtT7HEJPPirWNtPjQ=
SHA256 (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = vLKTkyUSN7eaF7bBm/KRNPQ+j0OMMZiYj81GGhzfBcw=
@@ -46,10 +44,10 @@ SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.
SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.zip) = TNZ2ieEIz9ZUWRxKf2k6xREGNKc9q8EmhvsHhUVWxIA=
SHA256 (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.mod) = lV2KV4w4+tlp0uW3oYjvDE6NEq5azxIpEqlM5Uh0cWo=
SHA256 (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.zip) = KIxMaIK/qHg/E58+1XCdSrsTjWvlCmWKTbyH67LS5pQ=
-SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.mod) = P5LuI7zdrhBsbU6/lS5IJGZxxU6Sy6B8Uv1khnclPT8=
-SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.zip) = VGUYT34LRmv9QlPdoE+76oPV2/QE59cfT/oUXXXXFGM=
-SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.mod) = wJJgbd9+TN6sXn1bjVSgKzCZc0ySrRBcdW/4p5PAItk=
-SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.zip) = Hh03DZU89oEd4/7AkKDD3+dMafID5Ri5hxiicFSaiQ4=
+SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.mod) = C9xCgRy2U3CjDmfM2uzn1dth3TWm3IJzwPUVQy+XQkc=
+SHA256 (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.zip) = UJGBEWUTNQAc1YN7pxKDZHuquRGEKiDSMzgRSHUhAMI=
+SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.mod) = ib4t+Sx7klpfqDckWNZqr2yUT5A/i0p0grMulsxycRQ=
+SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.zip) = NnUgxLo3HcUpkZ2G+5Fbjb0eEEp1V803tvePYKmhgUY=
SHA256 (go_modules/github.com/goark/errs/@v/v1.1.0.mod) = HdP0dfT4+GCMG+9lWyqNew4gr5jOusFXVZMrCapncEY=
SHA256 (go_modules/github.com/goark/errs/@v/v1.3.2.mod) = HyYYh2yL2wkHf1o8JI8FIoQ2HhL70Wd4Xb3DJevmEVk=
SHA256 (go_modules/github.com/goark/errs/@v/v1.3.2.zip) = BHp53f/b9ic2FYTMDiUcoh+KFlVZDQPKyp+B+No8sH0=
@@ -65,17 +63,18 @@ SHA256 (go_modules/github.com/google/go-cmdtest/@v/v0.
SHA256 (go_modules/github.com/google/go-cmp/@v/v0.3.1.mod) = gd95F8Ilqdp2BLIw2VL6J4xgqIMsENeZOF0TSwXVsIc=
SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
-SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = MkUIdKx1bvXUf2uBkwUQUwS5gZBFoW4/EFKJt88lLFE=
+SHA256 (go_modules/github.com/google/go-cmp/@v/v0.6.0.mod) = 58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
+SHA256 (go_modules/github.com/google/go-cmp/@v/v0.6.0.zip) = S06b9sSCEQgGUbSR37SNaLc2xmowW8+UYFYG4bouqko=
SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.mod) = uptesIeACKiR4WsIwXkisD+Sx2oD57/hgyY16tocGjU=
SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = uFELs0B4aRoguOSQLTca/g6xcbLa+VP2fLOWDRkmzPM=
SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = qUfdi3h5PdOY6iCt7h99M8zydn2/juazzXe3Hxnm+5s=
SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = oQw5QvCbxRMiaNItS7nQwYSRItUz/ozfZepp2gXOu68=
-SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw=
-SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.zip) = tkJqMvfQUlxqYBKlvnsUulelmBDZSfrbO/7CL2ZgTKw=
+SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw=
+SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = aaRXXHjLCWywU1ZUDt/6cm2iBsql/heJ1iZx0wj0pUg=
SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 4+87N7MKDkMiuzbTB2k2Og1Dv0YszdpGT6Y4YtFpT5c=
SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = TNCVWr7qQ9xLWgi4dp5pYQngN28qETqbjv8TzJDKwcc=
-SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.mod) = 6XoX8CAsLf1TKpse+ECQWFEbotc5iRW95KfBuuQUDpw=
-SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.zip) = RxvkkXvRlhHh/qANfVs3d063Xz9pyhBbuccXGcChwf4=
+SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.mod) = 6XoX8CAsLf1TKpse+ECQWFEbotc5iRW95KfBuuQUDpw=
+SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.zip) = AQCeQL/6/nrwhR5hX3OWWf301R4cHIbJhJroE5tjwH0=
SHA256 (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.mod) = diFB8mquOK84YY9/UPtIZyw5q64Qj5Kyi9OwAvK/h28=
SHA256 (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.zip) = mIY3mowx+QIc5oSQ4qIb2+p+X+lVMyKWUOGsFXHc14o=
SHA256 (go_modules/github.com/kevinburke/ssh_config/@v/v1.2.0.mod) = 2yQHDzYdFcUiAaC7wPRxbgz1QOSb1/uzaETFkS+Xk88=
@@ -99,14 +98,12 @@ SHA256 (go_modules/github.com/onsi/gomega/@v/v1.27.10.
SHA256 (go_modules/github.com/onsi/gomega/@v/v1.27.10.zip) = p3Q2xyJdqRsCNyOrDq82KnSH5BThglYyWp5h2n8d0WQ=
SHA256 (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.mod) = USsTAHBx6uHHFLSwFOm30iws5/CoWkNhkwNbfJ9us4g=
SHA256 (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.zip) = B/aTZBUo1iga3QwLEcIOkHFKNPTazEWb+324yAV2+e0=
-SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.mod) = ZPuUC3bJFGNZ1JnFQ1uBLuW/9xi/xl7iqWvb6Y1SUuA=
-SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.zip) = 1jdGbQrXUfTuHKi6eCpT23nxvnnBxhIbR+MIo0NY6U8=
-SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.mod) = WtMu4++y8MyV5RLpaxj2GWiBXwXLTpBVYacq5IyrWtE=
-SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.zip) = E4RHGgDw4CbF5F2fzMDaNj6UIyZ875M5jbFvzyS9uGA=
+SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.mod) = ZPuUC3bJFGNZ1JnFQ1uBLuW/9xi/xl7iqWvb6Y1SUuA=
+SHA256 (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.zip) = p1xn5KEN/lyl7VTwnA0F2DsOgSBPJ8G1FnjEcVsjSUg=
+SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.mod) = WtMu4++y8MyV5RLpaxj2GWiBXwXLTpBVYacq5IyrWtE=
+SHA256 (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.zip) = h/S4WfKmtkkuGsd5SX9bzE57MUaBk64uCrNAcAuT5bc=
SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 8Qo2tGIntPuz5pD2zHJtlGR18xZp7rxSxK1bLombToA=
SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = rP7pbdL+jmrgiumGRQSDCknSNddMKrk996XfopqQpGE=
-SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = XVuUVOLQIK8MdgNWjoaQS5m+/E1dZ8OoUF9hIVib0R8=
-SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 81sj/dK5Ui3dRsxcAWG08HZcUUR11dTKKoasoxOIyL0=
SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 3yjGqCPxgddheWlxd8DFlDxv+zjzwQstxTvjYO59RYk=
SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 1MNri80GFikKORMhXg9TuTG9bgBnBZbylg3xtEryvQc=
SHA256 (go_modules/github.com/pkg/profile/@v/v1.6.0.mod) = BuBr9ahImE+FnbIYGOY0Xb1D+3SRWDdAS8AbYcfnwBY=
@@ -118,7 +115,6 @@ SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mo
SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = dAzVgDEE763yd6DzUZ8OrZfjIdvZCc7uvXyLaza0R1Q=
SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = zRKUMvaTrNtOkSxjkyyxIG1UWcjboC3sG0GPgH3LeOs=
SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = NinUsuRX/bpenVGjduK+rZsoogaW+pBbcBx5JQGIxOM=
-SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = kFmpfaKZDIGaCXZ6XpvYeEtFpXt6JeKQVbvRsKqhRP8=
SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = w5VHzOboZujPo5XSk3vOMIAc0H8LkBwhMySPH7oS9Y0=
SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = eFJ1DVigU844sB8sIDIIgXVk9VLr83GytjAIHXAExq4=
SHA256 (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = IObs3/d7hGk4Nbl4uKFvbCK3hVlisjQQPV63SBi+RB8=
@@ -173,17 +169,18 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20190
SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20210921155107-089bfa567519.mod) = zWMRYSoqpNDX4DxBs6ofvC1fiVqz9hCJ+rgL/p+PVIU=
SHA256 (go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s=
SHA256 (go_modules/golang.org/x/crypto/@v/v0.13.0.mod) = 5/Nu6cqqredrdWX8aGItzI/a9tBd3uPn1cyuSWiNn00=
-SHA256 (go_modules/golang.org/x/crypto/@v/v0.13.0.zip) = tY2QL0in9ZWihYm27UvoteLuGjSW7KR3A56A625+ulc=
+SHA256 (go_modules/golang.org/x/crypto/@v/v0.14.0.mod) = M2oiBGbrPO1R60SJdioyZKXPtstxA1iHAJZmAJmpyqc=
+SHA256 (go_modules/golang.org/x/crypto/@v/v0.14.0.zip) = pyxX5x0PvUYNhJPJWPsoQTV+O6u7Mtf+LNUzVksdZrc=
SHA256 (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk=
SHA256 (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = yJ/iLnPawmoAplasEf9MbhprbNKrzFftzazew/va2C0=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.mod) = ko2BpDwXWlBsQQHgDgyVBo2xBccjjEVal9AqHKHaXn0=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.zip) = 54mSGiA2le3w0b/8mLD3a1+aJkwviO8ISi6pp2gIH4U=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.mod) = DV+cioupmmBfXQI2ZevcZujjjdf2tlVb0/C6CcbiLvQ=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.zip) = I1h7kTQ7ELe6YpK7Q1RiQIapxtzmXj59h48oqEYhJF0=
SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
-SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.zip) = ebf3n2i8gt/V3l9Yxam0dQEgvBsV+yAaGfJ/HX+071U=
+SHA256 (go_modules/golang.org/x/mod/@v/v0.13.0.mod) = XErAMQolMwdXA5zPOpjnX+/by31ETd0EkjAAOkSUW94=
+SHA256 (go_modules/golang.org/x/mod/@v/v0.13.0.zip) = H48DlcU3L/SbklZY4M/jooihotyRk7dmLhh/3rqcsWg=
SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM=
SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = mfQKUOjWDCWZrEXGzix21VSoQorNE8LGikk/ymGbT6g=
SHA256 (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
-SHA256 (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = br6z+vsJYS0+8f8EE9+qwFu6+PIpq94K4OASKY3+ZwI=
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo=
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo=
@@ -192,7 +189,9 @@ SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20211112
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) = sxXFJkfS2i925c2502fh1nJ3hCNqm/+2EhkrGbEKEo0=
SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 07fiNv8J5jIr5IkXAhbgGNMiGGLxoFPctj5T6rhTPBc=
SHA256 (go_modules/golang.org/x/net/@v/v0.15.0.mod) = PRBkbW8I2OioVtbyLyzXBsPivgES63dyY8/ROSx25LQ=
-SHA256 (go_modules/golang.org/x/net/@v/v0.15.0.zip) = 6JGUHwqD38hfgpkOKcvxk53KWVLQQkFmbIoifUGf3tM=
+SHA256 (go_modules/golang.org/x/net/@v/v0.16.0.mod) = y6YYS4uODVRWC/WmXxNszXanNMScBm7YA+twvQbBdpY=
+SHA256 (go_modules/golang.org/x/net/@v/v0.17.0.mod) = y6YYS4uODVRWC/WmXxNszXanNMScBm7YA+twvQbBdpY=
+SHA256 (go_modules/golang.org/x/net/@v/v0.17.0.zip) = 2ZQo6Vr2/Y/cIyhdabj258UslkyZApXkUYNxjjPr61o=
SHA256 (go_modules/golang.org/x/net/@v/v0.2.0.mod) = B+xkXjNT/CZz8tje5cFOuSi5wTEnpAn+PsQOq6Tb2zA=
SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) = Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs=
SHA256 (go_modules/golang.org/x/net/@v/v0.8.0.mod) = 6275vWQFrOPZnkOB0CVs5B+Dxm0aILTigwpMd2JF9xo=
@@ -200,7 +199,8 @@ SHA256 (go_modules/golang.org/x/sync/@v/v0.0.0-2019042
SHA256 (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
SHA256 (go_modules/golang.org/x/sync/@v/v0.3.0.mod) = 7Q/wxQgadUz8vnaMvPYMY5dbNddufXuZxayb+m2YKFE=
-SHA256 (go_modules/golang.org/x/sync/@v/v0.3.0.zip) = GHDnoZb3EZ1Mbtun3pzfxJ7hPIy3kh86lHVoFxxhUuA=
+SHA256 (go_modules/golang.org/x/sync/@v/v0.4.0.mod) = 7Q/wxQgadUz8vnaMvPYMY5dbNddufXuZxayb+m2YKFE=
+SHA256 (go_modules/golang.org/x/sync/@v/v0.4.0.zip) = d8XZxIuhxEAGDIfZobZ/LvUhaZQijhStP8/i3Zs/ITQ=
SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) = iWkRXko5EIhIMk55ob2KhEUjDm46rMvp+AV/tQ//yME=
SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) = GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20201119102817-f84b799fce68.mod) = GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
@@ -213,15 +213,16 @@ SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20220722
SHA256 (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
SHA256 (go_modules/golang.org/x/sys/@v/v0.11.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
SHA256 (go_modules/golang.org/x/sys/@v/v0.12.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
-SHA256 (go_modules/golang.org/x/sys/@v/v0.12.0.zip) = iSJdnmYDwJD/2TKGt8oSSEn63+QyDDsYpr3MxKwIZyw=
+SHA256 (go_modules/golang.org/x/sys/@v/v0.13.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
+SHA256 (go_modules/golang.org/x/sys/@v/v0.13.0.zip) = PRSa/Jk5mANUN0wNR0Ydzb0dOYDrL3fmAwSyP+5vPTc=
SHA256 (go_modules/golang.org/x/sys/@v/v0.2.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
SHA256 (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
SHA256 (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
SHA256 (go_modules/golang.org/x/sys/@v/v0.6.0.mod) = 8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
SHA256 (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = TLqxT3cGdxsnHZlaGzzBMf5aJGqtx+5tG6bwvYlHgfo=
SHA256 (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
-SHA256 (go_modules/golang.org/x/term/@v/v0.12.0.mod) = wpIGWJdMmcgFJ4+azIRDYmbw9101cToIjB80DiZFM10=
-SHA256 (go_modules/golang.org/x/term/@v/v0.12.0.zip) = 9LvEuqDJsFP30lKwbk6Lqr1oapqH2CAls0F5binznGA=
+SHA256 (go_modules/golang.org/x/term/@v/v0.13.0.mod) = Jid7C1vDPQJB8jN4OeimY9KmxgMFiHDyfO2d8f7n41c=
+SHA256 (go_modules/golang.org/x/term/@v/v0.13.0.zip) = ohQBM6te3qSG7JI52gGZXmBuYmHWbRpnPNKt0z0ID90=
SHA256 (go_modules/golang.org/x/term/@v/v0.2.0.mod) = 7fgz2hAZAP4s6NsjQJ5CRI9EGJjT19juRRmI47MMkwI=
SHA256 (go_modules/golang.org/x/term/@v/v0.5.0.mod) = DW9YIoqtwaZSjmdV2gGFFlZuOuXFIB963hdz9W+o2TQ=
SHA256 (go_modules/golang.org/x/term/@v/v0.6.0.mod) = ZDWbnGU3CEePAgcpiFBE/z2ABxhtnUQRJf6HSBfnEgE=
@@ -242,7 +243,8 @@ SHA256 (go_modules/golang.org/x/tools/@v/v0.0.0-201911
SHA256 (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = KouTZYmPCCL6zmW6CJoTU+aKZdNC8wDKMXzOzN5kIfM=
SHA256 (go_modules/golang.org/x/tools/@v/v0.12.1-0.20230815132531-74c255bcf846.mod) = 8ntM++BBE9T76CEuqUR3Q/vRDuxPOYipcdWhwKK6Crs=
SHA256 (go_modules/golang.org/x/tools/@v/v0.13.0.mod) = FCs0FrAOghO0CeJ5pDS5emzglTHJFMG0cXh4FX1Xmj8=
-SHA256 (go_modules/golang.org/x/tools/@v/v0.13.0.zip) = b9HiUBEiFXCUVEaOrVPDHFJLBcyQpi7YF9DUeA/bZCk=
+SHA256 (go_modules/golang.org/x/tools/@v/v0.14.0.mod) = pdITAroFd4OVj1r/cpV+0ovqJT4vcH8bQqI98jt+CD8=
+SHA256 (go_modules/golang.org/x/tools/@v/v0.14.0.zip) = Hk7I++U5Xq4ZI+Kbc0IkEIuTMIa7TUbQO6ttVHnFQkI=
SHA256 (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = nJteYq9p8rEAKc4SlE3Ig08SJqg7skPpoNvzfguxhro=
SHA256 (go_modules/golang.org/x/tools/@v/v0.6.0.mod) = gw7Xjc0+mSfEEuJkEjAwhEd0nVE9MQJNJ24kQ7IBZgk=
SHA256 (go_modules/golang.org/x/vuln/@v/v1.0.1.mod) = SeGrgKrGADpn8mJTvUItgIa6TUOiI0YxwAjWkiMKVa8=
@@ -268,7 +270,7 @@ SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312
SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = m1xb4Hh4qr/7KDXx3UhPUC/y64MhLl7fxmYXlz55hio=
SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE=
SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk=
-SHA256 (osv-scanner-v1.4.1.zip) = LZpHavtemsCOWnUsaLU1T9YVHaAW5/MsTvaYUd3D5R0=
+SHA256 (osv-scanner-v1.4.3.zip) = gGbMvcS614X0Nk0ZbMqibrYtuTIcs+mpHafD4ItK3cQ=
SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 65
SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = 49320
SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = 43
@@ -300,8 +302,6 @@ SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3
SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 4909858
SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100
SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539
-SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39
-SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = 19440
SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 54
SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = 9553
SIZE (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = 34
@@ -317,10 +317,10 @@ SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20
SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.zip) = 41846
SIZE (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.mod) = 573
SIZE (go_modules/github.com/go-git/go-billy/v5/@v/v5.5.0.zip) = 59927
-SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.mod) = 194
-SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20230305113008-0c11038e723f.zip) = 98071761
-SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.mod) = 1640
-SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.9.0.zip) = 693750
+SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.mod) = 509
+SIZE (go_modules/github.com/go-git/go-git-fixtures/v4/@v/v4.3.2-0.20231010084843-55a94097c399.zip) = 98219866
+SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.mod) = 1640
+SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.10.0.zip) = 725516
SIZE (go_modules/github.com/goark/errs/@v/v1.1.0.mod) = 38
SIZE (go_modules/github.com/goark/errs/@v/v1.3.2.mod) = 38
SIZE (go_modules/github.com/goark/errs/@v/v1.3.2.zip) = 21778
@@ -336,17 +336,18 @@ SIZE (go_modules/github.com/google/go-cmdtest/@v/v0.4.
SIZE (go_modules/github.com/google/go-cmp/@v/v0.3.1.mod) = 40
SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 41
SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 41
-SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 130220
+SIZE (go_modules/github.com/google/go-cmp/@v/v0.6.0.mod) = 41
+SIZE (go_modules/github.com/google/go-cmp/@v/v0.6.0.zip) = 129773
SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.mod) = 34
SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = 14941
SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = 45
SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = 33608
-SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.mod) = 51
-SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20230524184225-eabc099b10ab.zip) = 695790
+SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = 51
+SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = 696032
SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 36
SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = 8654
-SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.mod) = 192
-SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.7.zip) = 790460
+SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.mod) = 192
+SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.4.9.zip) = 794070
SIZE (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.mod) = 106
SIZE (go_modules/github.com/jessevdk/go-flags/@v/v1.5.0.zip) = 77449
SIZE (go_modules/github.com/kevinburke/ssh_config/@v/v1.2.0.mod) = 40
@@ -370,14 +371,12 @@ SIZE (go_modules/github.com/onsi/gomega/@v/v1.27.10.mo
SIZE (go_modules/github.com/onsi/gomega/@v/v1.27.10.zip) = 420749
SIZE (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.mod) = 131
SIZE (go_modules/github.com/owenrumney/go-sarif/@v/v1.1.1.zip) = 37561
-SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.mod) = 138
-SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.2.2.zip) = 56051
-SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.mod) = 53
-SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.1.zip) = 15275
+SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.mod) = 138
+SIZE (go_modules/github.com/owenrumney/go-sarif/v2/@v/v2.3.0.zip) = 56185
+SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.mod) = 53
+SIZE (go_modules/github.com/package-url/packageurl-go/@v/v0.1.2.zip) = 17038
SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 213
SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = 3528787
-SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = 36
-SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 219375
SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 29
SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 17866
SIZE (go_modules/github.com/pkg/profile/@v/v1.6.0.mod) = 39
@@ -389,7 +388,6 @@ SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mod)
SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = 476937
SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = 167
SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = 183284
-SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = 112
SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = 42
SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = 122358
SIZE (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = 281
@@ -444,17 +442,18 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-2019030
SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-20210921155107-089bfa567519.mod) = 247
SIZE (go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = 255
SIZE (go_modules/golang.org/x/crypto/@v/v0.13.0.mod) = 190
-SIZE (go_modules/golang.org/x/crypto/@v/v0.13.0.zip) = 1785967
+SIZE (go_modules/golang.org/x/crypto/@v/v0.14.0.mod) = 190
+SIZE (go_modules/golang.org/x/crypto/@v/v0.14.0.zip) = 1791629
SIZE (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 171
SIZE (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = 171
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.mod) = 179
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230905200255-921286631fa9.zip) = 462986
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.mod) = 179
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20231006140011-7918f672742d.zip) = 462987
SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = 84
-SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.zip) = 166176
+SIZE (go_modules/golang.org/x/mod/@v/v0.13.0.mod) = 84
+SIZE (go_modules/golang.org/x/mod/@v/v0.13.0.zip) = 165088
SIZE (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 157
SIZE (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = 117
SIZE (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = 84
-SIZE (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = 84
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = 172
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 181
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 181
@@ -463,7 +462,9 @@ SIZE (go_modules/golang.org/x/net/@v/v0.0.0-2021111220
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) = 179
SIZE (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 123
SIZE (go_modules/golang.org/x/net/@v/v0.15.0.mod) = 155
-SIZE (go_modules/golang.org/x/net/@v/v0.15.0.zip) = 1791878
+SIZE (go_modules/golang.org/x/net/@v/v0.16.0.mod) = 155
+SIZE (go_modules/golang.org/x/net/@v/v0.17.0.mod) = 155
+SIZE (go_modules/golang.org/x/net/@v/v0.17.0.zip) = 1824828
SIZE (go_modules/golang.org/x/net/@v/v0.2.0.mod) = 123
SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123
SIZE (go_modules/golang.org/x/net/@v/v0.8.0.mod) = 123
@@ -471,7 +472,8 @@ SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-201904230
SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = 25
SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 25
SIZE (go_modules/golang.org/x/sync/@v/v0.3.0.mod) = 34
-SIZE (go_modules/golang.org/x/sync/@v/v0.3.0.zip) = 29766
+SIZE (go_modules/golang.org/x/sync/@v/v0.4.0.mod) = 34
+SIZE (go_modules/golang.org/x/sync/@v/v0.4.0.zip) = 30186
SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) = 24
SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) = 33
SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20201119102817-f84b799fce68.mod) = 33
@@ -484,15 +486,16 @@ SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-2022072215
SIZE (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 33
SIZE (go_modules/golang.org/x/sys/@v/v0.11.0.mod) = 33
SIZE (go_modules/golang.org/x/sys/@v/v0.12.0.mod) = 33
-SIZE (go_modules/golang.org/x/sys/@v/v0.12.0.zip) = 1908262
+SIZE (go_modules/golang.org/x/sys/@v/v0.13.0.mod) = 33
+SIZE (go_modules/golang.org/x/sys/@v/v0.13.0.zip) = 1901653
SIZE (go_modules/golang.org/x/sys/@v/v0.2.0.mod) = 33
SIZE (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 33
SIZE (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 33
SIZE (go_modules/golang.org/x/sys/@v/v0.6.0.mod) = 33
SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = 95
SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = 95
-SIZE (go_modules/golang.org/x/term/@v/v0.12.0.mod) = 68
-SIZE (go_modules/golang.org/x/term/@v/v0.12.0.zip) = 19958
+SIZE (go_modules/golang.org/x/term/@v/v0.13.0.mod) = 68
+SIZE (go_modules/golang.org/x/term/@v/v0.13.0.zip) = 19958
SIZE (go_modules/golang.org/x/term/@v/v0.2.0.mod) = 67
SIZE (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 67
SIZE (go_modules/golang.org/x/term/@v/v0.6.0.mod) = 67
@@ -513,7 +516,8 @@ SIZE (go_modules/golang.org/x/tools/@v/v0.0.0-20191119
SIZE (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 327
SIZE (go_modules/golang.org/x/tools/@v/v0.12.1-0.20230815132531-74c255bcf846.mod) = 214
SIZE (go_modules/golang.org/x/tools/@v/v0.13.0.mod) = 214
-SIZE (go_modules/golang.org/x/tools/@v/v0.13.0.zip) = 3071376
+SIZE (go_modules/golang.org/x/tools/@v/v0.14.0.mod) = 194
+SIZE (go_modules/golang.org/x/tools/@v/v0.14.0.zip) = 3138694
SIZE (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 177
SIZE (go_modules/golang.org/x/tools/@v/v0.6.0.mod) = 211
SIZE (go_modules/golang.org/x/vuln/@v/v1.0.1.mod) = 408
@@ -539,4 +543,4 @@ SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-2023031216
SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = 28985
SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106
SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567
-SIZE (osv-scanner-v1.4.1.zip) = 2081963
+SIZE (osv-scanner-v1.4.3.zip) = 2105180
blob - c7c1ab632d686d4aae5467b432af2b1910aed60a
file + security/osv-scanner/modules.inc
--- security/osv-scanner/modules.inc
+++ security/osv-scanner/modules.inc
@@ -13,7 +13,6 @@ MODGO_MODULES = \
github.com/bwesterb/go-ristretto v1.2.3 \
github.com/cloudflare/circl v1.3.3 \
github.com/cpuguy83/go-md2man/v2 v2.0.2 \
- github.com/creack/pty v1.1.9 \
github.com/cyphar/filepath-securejoin v0.2.4 \
github.com/davecgh/go-spew v1.1.1 \
github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a \
@@ -21,19 +20,19 @@ MODGO_MODULES = \
github.com/gliderlabs/ssh v0.3.5 \
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 \
github.com/go-git/go-billy/v5 v5.5.0 \
- github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20230305113008-0c11038e723f \
- github.com/go-git/go-git/v5 v5.9.0 \
+ github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 \
+ github.com/go-git/go-git/v5 v5.10.0 \
github.com/goark/errs v1.3.2 \
github.com/goark/go-cvss v1.6.6 \
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da \
github.com/golang/protobuf v1.3.4 \
github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786 \
- github.com/google/go-cmp v0.5.9 \
+ github.com/google/go-cmp v0.6.0 \
github.com/google/renameio v0.1.0 \
github.com/hexops/gotextdiff v1.0.3 \
- github.com/ianlancetaylor/demangle v0.0.0-20230524184225-eabc099b10ab \
+ github.com/ianlancetaylor/demangle v0.0.0-20231023195312-e2daf7ba7156 \
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 \
- github.com/jedib0t/go-pretty/v6 v6.4.7 \
+ github.com/jedib0t/go-pretty/v6 v6.4.9 \
github.com/jessevdk/go-flags v1.5.0 \
github.com/kevinburke/ssh_config v1.2.0 \
github.com/kr/pretty v0.3.1 \
@@ -44,10 +43,9 @@ MODGO_MODULES = \
github.com/mmcloughlin/avo v0.5.0 \
github.com/onsi/gomega v1.27.10 \
github.com/owenrumney/go-sarif v1.1.1 \
- github.com/owenrumney/go-sarif/v2 v2.2.2 \
- github.com/package-url/packageurl-go v0.1.1 \
+ github.com/owenrumney/go-sarif/v2 v2.3.0 \
+ github.com/package-url/packageurl-go v0.1.2 \
github.com/pjbgf/sha1cd v0.3.0 \
- github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e \
github.com/pkg/errors v0.9.1 \
github.com/pkg/profile v1.6.0 \
github.com/pmezard/go-difflib v1.0.0 \
@@ -72,15 +70,15 @@ MODGO_MODULES = \
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 \
github.com/yuin/goldmark v1.4.13 \
github.com/zclconf/go-cty v1.10.0 \
- golang.org/x/crypto v0.13.0 \
- golang.org/x/exp v0.0.0-20230905200255-921286631fa9 \
- golang.org/x/mod v0.12.0 \
- golang.org/x/net v0.15.0 \
- golang.org/x/sync v0.3.0 \
- golang.org/x/sys v0.12.0 \
- golang.org/x/term v0.12.0 \
+ golang.org/x/crypto v0.14.0 \
+ golang.org/x/exp v0.0.0-20231006140011-7918f672742d \
+ golang.org/x/mod v0.13.0 \
+ golang.org/x/net v0.17.0 \
+ golang.org/x/sync v0.4.0 \
+ golang.org/x/sys v0.13.0 \
+ golang.org/x/term v0.13.0 \
golang.org/x/text v0.13.0 \
- golang.org/x/tools v0.13.0 \
+ golang.org/x/tools v0.14.0 \
golang.org/x/vuln v1.0.1 \
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7 \
google.golang.org/appengine v1.6.5 \
@@ -100,11 +98,11 @@ MODGO_MODFILES = \
github.com/golang/protobuf v1.3.1 \
github.com/google/go-cmp v0.3.1 \
github.com/google/go-cmp v0.5.8 \
+ github.com/google/go-cmp v0.5.9 \
github.com/kr/pretty v0.1.0 \
github.com/kr/text v0.1.0 \
github.com/mattn/go-runewidth v0.0.13 \
github.com/rivo/uniseg v0.2.0 \
- github.com/rogpeppe/go-internal v1.9.0 \
github.com/sergi/go-diff v1.1.0 \
github.com/sirupsen/logrus v1.7.0 \
github.com/skeema/knownhosts v1.2.0 \
@@ -120,12 +118,13 @@ MODGO_MODFILES = \
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 \
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 \
golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d \
+ golang.org/x/crypto v0.13.0 \
golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a \
golang.org/x/crypto v0.7.0 \
+ golang.org/x/mod v0.12.0 \
golang.org/x/mod v0.6.0 \
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
golang.org/x/mod v0.8.0 \
- golang.org/x/mod v0.9.0 \
golang.org/x/net v0.0.0-20190603091049-60506f45cf65 \
golang.org/x/net v0.0.0-20190620200207-3b0461eec859 \
golang.org/x/net v0.0.0-20200301022130-244492dfa37a \
@@ -133,12 +132,15 @@ MODGO_MODFILES = \
golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 \
golang.org/x/net v0.0.0-20220722155237-a158d28d115b \
golang.org/x/net v0.10.0 \
+ golang.org/x/net v0.15.0 \
+ golang.org/x/net v0.16.0 \
golang.org/x/net v0.2.0 \
golang.org/x/net v0.6.0 \
golang.org/x/net v0.8.0 \
golang.org/x/sync v0.0.0-20190423024810-112230192c58 \
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 \
golang.org/x/sync v0.1.0 \
+ golang.org/x/sync v0.3.0 \
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a \
golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 \
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68 \
@@ -150,6 +152,7 @@ MODGO_MODFILES = \
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f \
golang.org/x/sys v0.1.0 \
golang.org/x/sys v0.11.0 \
+ golang.org/x/sys v0.12.0 \
golang.org/x/sys v0.2.0 \
golang.org/x/sys v0.3.0 \
golang.org/x/sys v0.5.0 \
@@ -173,6 +176,7 @@ MODGO_MODFILES = \
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e \
golang.org/x/tools v0.1.12 \
golang.org/x/tools v0.12.1-0.20230815132531-74c255bcf846 \
+ golang.org/x/tools v0.13.0 \
golang.org/x/tools v0.2.0 \
golang.org/x/tools v0.6.0 \
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 \
Hello,

Here's an update for osv-scanner that's been working fine (including the
new git submodule support)

changelogs:
v1.4.2:
* Support versions with build metadata in yarn.lock files
* Add name field to sarif rule output

v1.4.3:
* Add support for scanning vendored C/C++ files
* Scan submodules commit hashes
* Fix gitignore matching for root directory
* Go binary not found should not be an error
* handle npm/yarn aliased packages
* fix: remove some extra newlines in sarif report

Thanks,
Lucas

No comments:

Post a Comment