Wednesday, February 28, 2024

[update] security/osv-scanner to 1.6.2

diff refs/heads/master refs/heads/osv-scanner
commit - 7613a8cf0b66c00314807995741459338c5bd5d4
commit + 79224448a1d8ffe9f9a5e56791730c8f54ff2836
blob - 7f2a1cac0a859bce9ed72b508f08a8f316386202
blob + 950e8b5dd2048bfb31c626aa2f3abe23466e12d8
--- security/osv-scanner/Makefile
+++ security/osv-scanner/Makefile
@@ -6,7 +6,7 @@ ONLY_FOR_ARCHS = aarch64 amd64 mips64 riscv64

COMMENT = scan your project's dependencies for vulnerabilities

-V = 1.6.1
+V = 1.6.2
MODGO_MODNAME = github.com/google/osv-scanner
MODGO_VERSION = v${V}

blob - 93ceb7953126b28476ffd3331f3c8e1387b057ab
blob + b0f572931570f2d0c025cd3b5172433c011344b7
--- security/osv-scanner/distinfo
+++ security/osv-scanner/distinfo
@@ -4,8 +4,13 @@ SHA256 (go_modules/cloud.google.com/go/compute/metadat
SHA256 (go_modules/cloud.google.com/go/compute/metadata/@v/v0.2.3.zip) = KShk29Cx3jepaOKF6UmIXlczhIN9gc02lb5c4uI5GIc=
SHA256 (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 4jxLgDpsbm5FdHlG6H0kcEzXd1bMSEvf0XtXIjvzINY=
SHA256 (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = Gn7zlnCcWDUha7R7qSGN1ECsUwdYPGnReYzp5FfxMR0=
+SHA256 (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20231114023923-e40c4d5c34e5.mod) = h/veE8xDl3AO43RbynyN7nbNERVbVmMCHMmQ07wfiOc=
SHA256 (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = h/veE8xDl3AO43RbynyN7nbNERVbVmMCHMmQ07wfiOc=
SHA256 (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = 6enK6Ws3A9qUndelYdFX5ck9+OLN4POMROhxCHr08sk=
+SHA256 (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = WnpKVdUYRv0AEsYuGl21fqLdd562akWx8o/C+Okbk5Y=
+SHA256 (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = mxvUXKycVMBCaRmgLvHPEmC8WaM6e86FLtPH3LpQFg4=
+SHA256 (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.mod) = PBARmS9BLys0bWQHHH40BDoAiidH3bPqo/In6id0XXw=
+SHA256 (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.zip) = 9v1Va2QyQ05p9PTdcRwa0sd3llF6wXshSTv0cXdbjaA=
SHA256 (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = JnfIL+dPIDdyiJpagBr7Mp2VF1UId92ssXIZFpurPt0=
SHA256 (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.zip) = XeJGoMtMJW8/1dDbigihFPWK8MLhk7vwrZASEErbtrI=
SHA256 (go_modules/github.com/!cyclone!d!x/cyclonedx-go/@v/v0.8.0.mod) = X1TYnaBD7V3Tmb6nIG+3k3AcVSRgAH6nq+sCUVmMX9s=
@@ -42,6 +47,8 @@ SHA256 (go_modules/github.com/cncf/xds/go/@v/v0.0.0-20
SHA256 (go_modules/github.com/cncf/xds/go/@v/v0.0.0-20230607035331-e9ce68804cb4.zip) = oMbmbq3jV67aTtqp0JYSCFhg3EwLRO34ImV0k5vfYJE=
SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro=
SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I=
+SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE=
+SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = IO38wnr9eZF4C8kcpSPSaZnqAl5B9gvF7XG7rADhdeI=
SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 3H2HZHOPLSMbofLvWkVzpI/kD2Rby4spHkIGljRXJTc=
SHA256 (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = CvlOtZEz/aaf0ETa/6fWK6Do0nFtT7HEJPPirWNtPjQ=
SHA256 (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = vLKTkyUSN7eaF7bBm/KRNPQ+j0OMMZiYj81GGhzfBcw=
@@ -57,6 +64,12 @@ SHA256 (go_modules/github.com/envoyproxy/protoc-gen-va
SHA256 (go_modules/github.com/envoyproxy/protoc-gen-validate/@v/v1.0.2.zip) = p50Z+wZVVLIUSSx2GddguUQFQp58pp7eki6WiSmmb/s=
SHA256 (go_modules/github.com/felixge/fgprof/@v/v0.9.3.mod) = G4FCpyTwr69dOnTq+HyFVk1QzegJwKNNz6AmZH+ucx4=
SHA256 (go_modules/github.com/felixge/fgprof/@v/v0.9.3.zip) = LIMmgIes+Ldnvmnbw3wJn6hYVnY8Loj7mWN9Rutqwjw=
+SHA256 (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.mod) = cxFqOWZ0gqB4QqNn1Ze7DFk05gNRPicBwCRh2PdqSe8=
+SHA256 (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.zip) = bz2w1Z/F4ggHP2wgCkhz/J1FFU2/fZKtqPxp5bvGYV4=
+SHA256 (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.mod) = qTKf7D6TiBiejVKKZSqPGMG528Fd1zjkXuHPZKJgMKI=
+SHA256 (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.zip) = R0q2xm5qvE+ll5s/tIvCUf2yN+UtnwoodGy0ws1cAoY=
+SHA256 (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.mod) = bkEHDHL8uKlTFntlUY8ObX02kEtalqLjYlSnpmYz044=
+SHA256 (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.zip) = OQAkNiUsiKLxWcuTK3cyvakxnaGMhX/nVS0IVM/Z4Qk=
SHA256 (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.mod) = e58vOhQap3SYfxqH3pDCYmF1qKUCULu557Sbxvv9Kf8=
SHA256 (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.zip) = fJ36VBTamJYPw9nSBdJ3SNzGPTFIJqTUdF9IhrWpfx8=
SHA256 (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.mod) = L01TDeXjVrwb8VEBENnKBAbTI7bLlBl44d1zEdQYuo8=
@@ -90,10 +103,8 @@ SHA256 (go_modules/github.com/google/renameio/@v/v0.1.
SHA256 (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = uFELs0B4aRoguOSQLTca/g6xcbLa+VP2fLOWDRkmzPM=
SHA256 (go_modules/github.com/google/uuid/@v/v1.3.1.mod) = c9pHtjOLAKCC/UUao1oyc9OtwJuOm7qY2rAQkeQCr24=
SHA256 (go_modules/github.com/google/uuid/@v/v1.3.1.zip) = nZ1s+yjObb5LUYxCxrzNZ7tTGhBoWYCPNugqXD+4xk0=
-SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = qUfdi3h5PdOY6iCt7h99M8zydn2/juazzXe3Hxnm+5s=
-SHA256 (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = oQw5QvCbxRMiaNItS7nQwYSRItUz/ozfZepp2gXOu68=
-SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw=
-SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = aaRXXHjLCWywU1ZUDt/6cm2iBsql/heJ1iZx0wj0pUg=
+SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.mod) = EF1NDHjIIF+F1TvIayvdxYQwzg+d03tyWCu6f/jeOLw=
+SHA256 (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.zip) = QAc8gXYGfCcYpTeTl2Zq3vsT77ZEFn3wrj97GIVCKzY=
SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 4+87N7MKDkMiuzbTB2k2Og1Dv0YszdpGT6Y4YtFpT5c=
SHA256 (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = TNCVWr7qQ9xLWgi4dp5pYQngN28qETqbjv8TzJDKwcc=
SHA256 (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.5.3.mod) = CcS/hHDsFeQrjDq1SPl3bKNC6tZw+75rph4grx4U8MM=
@@ -108,6 +119,8 @@ SHA256 (go_modules/github.com/kr/pty/@v/v1.1.1.zip) =
SHA256 (go_modules/github.com/kr/text/@v/v0.1.0.mod) = L7qVKeXBPd5i83Hvc4O68E1xMlAdrGqgjpEPnsC/hcU=
SHA256 (go_modules/github.com/kr/text/@v/v0.2.0.mod) = 9jh5sgT2zolc6lNZS4FPWsCvCEhrM7HKecZXOE77xyY=
SHA256 (go_modules/github.com/kr/text/@v/v0.2.0.zip) = No6zGPkaW2e+kFxHAyq1wxodSal4SLEBGg0KISKzC6Q=
+SHA256 (go_modules/github.com/maruel/natural/@v/v1.1.0.mod) = yoZQDbGGI1+Id1DCr4bGyMnJx+553MwrNOZy/Ja6O7o=
+SHA256 (go_modules/github.com/maruel/natural/@v/v1.1.0.zip) = SGRrh/1r6ypIc3s7ddS6NXvQ1sDuM37gcmLCSnyn/yc=
SHA256 (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.mod) = IWyT0ZMQYSyB1cdBAkmJ+DiX0jM8Op+We1ixMXWH9Rk=
SHA256 (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.zip) = 2XxPBmehSVdWnJMqjiSI8cQ3V7TczjE4l6oAHwfRSbA=
SHA256 (go_modules/github.com/mmcloughlin/avo/@v/v0.5.0.mod) = ub0wCk3oARuPZ7dUz1udGPukajNNjUlaQBMZXtg3QXQ=
@@ -124,6 +137,8 @@ SHA256 (go_modules/github.com/pandatix/go-cvss/@v/v0.6
SHA256 (go_modules/github.com/pandatix/go-cvss/@v/v0.6.2.zip) = qdwiUINJPYS29uBDsVcF4w126chpOiHAAWTchtaILfw=
SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 8Qo2tGIntPuz5pD2zHJtlGR18xZp7rxSxK1bLombToA=
SHA256 (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = rP7pbdL+jmrgiumGRQSDCknSNddMKrk996XfopqQpGE=
+SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = XVuUVOLQIK8MdgNWjoaQS5m+/E1dZ8OoUF9hIVib0R8=
+SHA256 (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 81sj/dK5Ui3dRsxcAWG08HZcUUR11dTKKoasoxOIyL0=
SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 3yjGqCPxgddheWlxd8DFlDxv+zjzwQstxTvjYO59RYk=
SHA256 (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 1MNri80GFikKORMhXg9TuTG9bgBnBZbylg3xtEryvQc=
SHA256 (go_modules/github.com/pkg/profile/@v/v1.7.0.mod) = SnkqIyRN7sE3zqtMGrCjdQcat/FyI0w6M+JL0BlpR7U=
@@ -135,6 +150,7 @@ SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mo
SHA256 (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = dAzVgDEE763yd6DzUZ8OrZfjIdvZCc7uvXyLaza0R1Q=
SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = zRKUMvaTrNtOkSxjkyyxIG1UWcjboC3sG0GPgH3LeOs=
SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = NinUsuRX/bpenVGjduK+rZsoogaW+pBbcBx5JQGIxOM=
+SHA256 (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = kFmpfaKZDIGaCXZ6XpvYeEtFpXt6JeKQVbvRsKqhRP8=
SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = w5VHzOboZujPo5XSk3vOMIAc0H8LkBwhMySPH7oS9Y0=
SHA256 (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = eFJ1DVigU844sB8sIDIIgXVk9VLr83GytjAIHXAExq4=
SHA256 (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = IObs3/d7hGk4Nbl4uKFvbCK3hVlisjQQPV63SBi+RB8=
@@ -163,6 +179,16 @@ SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8
SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.4.zip) = 4gbart4L0D3gYL3765hKwsSbgwWHU//8k/4MIg6odTI=
SHA256 (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.mod) = rgAGWi389/UqxU+L2CZMy/xhWdcRqzEv3hTpLph2Prs=
SHA256 (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.zip) = 8m+czoXKLRfpnM64pu+R5OVXZWLBHbKGDgv3aU2ExNQ=
+SHA256 (go_modules/github.com/tidwall/gjson/@v/v1.14.2.mod) = 2U7s2AUM/8lXuZvtijCO/qpmmsE4VCkNCBot7VR4r5M=
+SHA256 (go_modules/github.com/tidwall/gjson/@v/v1.17.0.mod) = 2U7s2AUM/8lXuZvtijCO/qpmmsE4VCkNCBot7VR4r5M=
+SHA256 (go_modules/github.com/tidwall/gjson/@v/v1.17.0.zip) = i3HzD31yfJeYYdZOVJoZEeTNNtRwSBtR2imYuZSzxMY=
+SHA256 (go_modules/github.com/tidwall/match/@v/v1.1.1.mod) = AjZOUVMn2ZiNH2vTevnFhPi5jTtPQ/nh8Y4m12rsD0Q=
+SHA256 (go_modules/github.com/tidwall/match/@v/v1.1.1.zip) = K6QffyczDUng5DLL+Wv5ByCjPkqXvlj+U/Y6fmbwTTc=
+SHA256 (go_modules/github.com/tidwall/pretty/@v/v1.2.0.mod) = blxfpJPY8Y6JdLOO1j6McYY8zlnmWdmNDvhBe/gePs8=
+SHA256 (go_modules/github.com/tidwall/pretty/@v/v1.2.1.mod) = blxfpJPY8Y6JdLOO1j6McYY8zlnmWdmNDvhBe/gePs8=
+SHA256 (go_modules/github.com/tidwall/pretty/@v/v1.2.1.zip) = kydXm/nmEN51Put8NcjPHj9W5uViPL9l5HvIB2Aj0as=
+SHA256 (go_modules/github.com/tidwall/sjson/@v/v1.2.5.mod) = OLCTI6uO+PgDs9hrriyUdl04FaLVt1H9TwcDn0VRzG8=
+SHA256 (go_modules/github.com/tidwall/sjson/@v/v1.2.5.zip) = /ED9qHx95VNi9jhuBp1nR3LyXJ12QR7oI6y5rHiyBWU=
SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.mod) = XD3aJw3iuXT/2n/bvxItJJk7suwFeFtP+RROdhfqxBU=
SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.zip) = UtYNuIDHWL39a1+2enBjtT3AjzpjgC6hxOKQrkCPEbM=
SHA256 (go_modules/github.com/vmihailenco/msgpack/v4/@v/v4.3.12.mod) = LIDah2TON8JwC2yT3I7lPROceagqQKB1mAD3k4O8/cY=
@@ -193,14 +219,15 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.18.0.mod)
SHA256 (go_modules/golang.org/x/crypto/@v/v0.18.0.zip) = VBNHlyC79RgxRGUoBSA6PfdIANLygfYR6C06fsFfQyU=
SHA256 (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk=
SHA256 (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = yJ/iLnPawmoAplasEf9MbhprbNKrzFftzazew/va2C0=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.mod) = mR9g3gigToBWNSaTXIm9u5J07hRUdeXqAfjvGjxVdTs=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.zip) = Inr7dQ66eqtnQw276p46OIbIaKrkH+p43URYZaIDsjI=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.mod) = mR9g3gigToBWNSaTXIm9u5J07hRUdeXqAfjvGjxVdTs=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.zip) = cGuv2OfT19QRKmIwt06TBAFafY8zrxg+Arq8z7hyF+U=
SHA256 (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
SHA256 (go_modules/golang.org/x/mod/@v/v0.14.0.mod) = XErAMQolMwdXA5zPOpjnX+/by31ETd0EkjAAOkSUW94=
SHA256 (go_modules/golang.org/x/mod/@v/v0.14.0.zip) = mKEiySrVXe72dPZUa0wpXtk9EGF43STsQESa4ztBA3o=
SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM=
SHA256 (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = mfQKUOjWDCWZrEXGzix21VSoQorNE8LGikk/ymGbT6g=
SHA256 (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
+SHA256 (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = br6z+vsJYS0+8f8EE9+qwFu6+PIpq94K4OASKY3+ZwI=
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo=
SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 5u/a94opUD8IDPbSYV4onPsdnjq31XD1NmjsorSrQdo=
@@ -315,15 +342,20 @@ SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312
SHA256 (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = m1xb4Hh4qr/7KDXx3UhPUC/y64MhLl7fxmYXlz55hio=
SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE=
SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk=
-SHA256 (osv-scanner-v1.6.1.zip) = q3cALnmazcW9q/6/C0F37kWZO5H+z4ns1csC2dgjT3s=
+SHA256 (osv-scanner-v1.6.2.zip) = rucJfd2lZUbH+HPR6M43qAQfAks1OFe1Izpmn2+3wr0=
SIZE (go_modules/cloud.google.com/go/compute/@v/v1.23.0.mod) = 1093
SIZE (go_modules/cloud.google.com/go/compute/@v/v1.23.0.zip) = 1756502
SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.2.3.mod) = 98
SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.2.3.zip) = 20855
SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.mod) = 65
SIZE (go_modules/dario.cat/mergo/@v/v1.0.0.zip) = 49320
+SIZE (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20231114023923-e40c4d5c34e5.mod) = 356
SIZE (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = 356
SIZE (go_modules/deps.dev/api/v3alpha/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = 39831
+SIZE (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.mod) = 585
+SIZE (go_modules/deps.dev/util/resolve/@v/v0.0.0-20240109042716-00b51ef52ece.zip) = 83541
+SIZE (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.mod) = 39
+SIZE (go_modules/deps.dev/util/semver/@v/v0.0.0-20240109040450-1e316b822bc4.zip) = 91136
SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.mod) = 43
SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.3.2.zip) = 303020
SIZE (go_modules/github.com/!cyclone!d!x/cyclonedx-go/@v/v0.8.0.mod) = 543
@@ -360,6 +392,8 @@ SIZE (go_modules/github.com/cncf/xds/go/@v/v0.0.0-2023
SIZE (go_modules/github.com/cncf/xds/go/@v/v0.0.0-20230607035331-e9ce68804cb4.zip) = 140361
SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100
SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539
+SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39
+SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.zip) = 19440
SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.mod) = 54
SIZE (go_modules/github.com/cyphar/filepath-securejoin/@v/v0.2.4.zip) = 9553
SIZE (go_modules/github.com/davecgh/go-spew/@v/v1.1.0.mod) = 34
@@ -375,6 +409,12 @@ SIZE (go_modules/github.com/envoyproxy/protoc-gen-vali
SIZE (go_modules/github.com/envoyproxy/protoc-gen-validate/@v/v1.0.2.zip) = 227165
SIZE (go_modules/github.com/felixge/fgprof/@v/v0.9.3.mod) = 151
SIZE (go_modules/github.com/felixge/fgprof/@v/v0.9.3.zip) = 343885
+SIZE (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.mod) = 46
+SIZE (go_modules/github.com/gkampitakis/ciinfo/@v/v0.3.0.zip) = 15099
+SIZE (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.mod) = 47
+SIZE (go_modules/github.com/gkampitakis/go-diff/@v/v1.3.2.zip) = 1349669
+SIZE (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.mod) = 454
+SIZE (go_modules/github.com/gkampitakis/go-snaps/@v/v0.4.12.zip) = 155263
SIZE (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.mod) = 371
SIZE (go_modules/github.com/gliderlabs/ssh/@v/v0.3.5.zip) = 35754
SIZE (go_modules/github.com/go-git/gcfg/@v/v1.5.1-0.20230307220236-3a3c6141e376.mod) = 111
@@ -408,10 +448,8 @@ SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.
SIZE (go_modules/github.com/google/renameio/@v/v0.1.0.zip) = 14941
SIZE (go_modules/github.com/google/uuid/@v/v1.3.1.mod) = 30
SIZE (go_modules/github.com/google/uuid/@v/v1.3.1.zip) = 26946
-SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.mod) = 45
-SIZE (go_modules/github.com/hexops/gotextdiff/@v/v1.0.3.zip) = 33608
-SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.mod) = 51
-SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20231023195312-e2daf7ba7156.zip) = 696032
+SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.mod) = 51
+SIZE (go_modules/github.com/ianlancetaylor/demangle/@v/v0.0.0-20240117034632-964b1d53ca6c.zip) = 696101
SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.mod) = 36
SIZE (go_modules/github.com/jbenet/go-context/@v/v0.0.0-20150711004518-d14ea06fba99.zip) = 8654
SIZE (go_modules/github.com/jedib0t/go-pretty/v6/@v/v6.5.3.mod) = 528
@@ -426,6 +464,8 @@ SIZE (go_modules/github.com/kr/pty/@v/v1.1.1.zip) = 14
SIZE (go_modules/github.com/kr/text/@v/v0.1.0.mod) = 64
SIZE (go_modules/github.com/kr/text/@v/v0.2.0.mod) = 68
SIZE (go_modules/github.com/kr/text/@v/v0.2.0.zip) = 12607
+SIZE (go_modules/github.com/maruel/natural/@v/v1.1.0.mod) = 42
+SIZE (go_modules/github.com/maruel/natural/@v/v1.1.0.zip) = 10462
SIZE (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.mod) = 84
SIZE (go_modules/github.com/mattn/go-runewidth/@v/v0.0.15.zip) = 21768
SIZE (go_modules/github.com/mmcloughlin/avo/@v/v0.5.0.mod) = 134
@@ -442,6 +482,8 @@ SIZE (go_modules/github.com/pandatix/go-cvss/@v/v0.6.2
SIZE (go_modules/github.com/pandatix/go-cvss/@v/v0.6.2.zip) = 281859
SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.mod) = 213
SIZE (go_modules/github.com/pjbgf/sha1cd/@v/v0.3.0.zip) = 3528787
+SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.mod) = 36
+SIZE (go_modules/github.com/pkg/diff/@v/v0.0.0-20210226163009-20ebb0f2a09e.zip) = 219375
SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.mod) = 29
SIZE (go_modules/github.com/pkg/errors/@v/v0.9.1.zip) = 17866
SIZE (go_modules/github.com/pkg/profile/@v/v1.7.0.mod) = 81
@@ -453,6 +495,7 @@ SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.mod)
SIZE (go_modules/github.com/rivo/uniseg/@v/v0.4.4.zip) = 476937
SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.mod) = 167
SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.11.0.zip) = 183284
+SIZE (go_modules/github.com/rogpeppe/go-internal/@v/v1.9.0.mod) = 112
SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.mod) = 42
SIZE (go_modules/github.com/russross/blackfriday/v2/@v/v2.1.0.zip) = 122358
SIZE (go_modules/github.com/sergi/go-diff/@v/v1.1.0.mod) = 281
@@ -481,6 +524,16 @@ SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.4
SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.4.zip) = 120537
SIZE (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.mod) = 58
SIZE (go_modules/github.com/terminalstatic/go-xsd-validate/@v/v0.1.5.zip) = 23362
+SIZE (go_modules/github.com/tidwall/gjson/@v/v1.14.2.mod) = 121
+SIZE (go_modules/github.com/tidwall/gjson/@v/v1.17.0.mod) = 121
+SIZE (go_modules/github.com/tidwall/gjson/@v/v1.17.0.zip) = 61942
+SIZE (go_modules/github.com/tidwall/match/@v/v1.1.1.mod) = 41
+SIZE (go_modules/github.com/tidwall/match/@v/v1.1.1.zip) = 6893
+SIZE (go_modules/github.com/tidwall/pretty/@v/v1.2.0.mod) = 42
+SIZE (go_modules/github.com/tidwall/pretty/@v/v1.2.1.mod) = 42
+SIZE (go_modules/github.com/tidwall/pretty/@v/v1.2.1.zip) = 12501
+SIZE (go_modules/github.com/tidwall/sjson/@v/v1.2.5.mod) = 122
+SIZE (go_modules/github.com/tidwall/sjson/@v/v1.2.5.zip) = 28719
SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.mod) = 280
SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.27.1.zip) = 3552284
SIZE (go_modules/github.com/vmihailenco/msgpack/v4/@v/v4.3.12.mod) = 382
@@ -511,14 +564,15 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.18.0.mod) =
SIZE (go_modules/golang.org/x/crypto/@v/v0.18.0.zip) = 1797935
SIZE (go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 171
SIZE (go_modules/golang.org/x/crypto/@v/v0.7.0.mod) = 171
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.mod) = 133
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240112132812-db7319d0e0e3.zip) = 589707
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.mod) = 133
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20240119083558-1b970713d09a.zip) = 590537
SIZE (go_modules/golang.org/x/mod/@v/v0.12.0.mod) = 84
SIZE (go_modules/golang.org/x/mod/@v/v0.14.0.mod) = 84
SIZE (go_modules/golang.org/x/mod/@v/v0.14.0.zip) = 165104
SIZE (go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 157
SIZE (go_modules/golang.org/x/mod/@v/v0.6.0.mod) = 117
SIZE (go_modules/golang.org/x/mod/@v/v0.8.0.mod) = 84
+SIZE (go_modules/golang.org/x/mod/@v/v0.9.0.mod) = 84
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190603091049-60506f45cf65.mod) = 172
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20190620200207-3b0461eec859.mod) = 181
SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20200301022130-244492dfa37a.mod) = 181
@@ -633,4 +687,4 @@ SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-2023031216
SIZE (go_modules/mvdan.cc/unparam/@v/v0.0.0-20230312165513-e84e2d14e3b8.zip) = 28985
SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106
SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567
-SIZE (osv-scanner-v1.6.1.zip) = 2166878
+SIZE (osv-scanner-v1.6.2.zip) = 3034859
blob - 7fe8089387d22745e421fe3e182603b347180fdf
blob + a3b57b7d07e8c21e946abeea00fe96cf37efe4f1
--- security/osv-scanner/modules.inc
+++ security/osv-scanner/modules.inc
@@ -3,6 +3,8 @@ MODGO_MODULES = \
cloud.google.com/go/compute/metadata v0.2.3 \
dario.cat/mergo v1.0.0 \
deps.dev/api/v3alpha v0.0.0-20240109042716-00b51ef52ece \
+ deps.dev/util/resolve v0.0.0-20240109042716-00b51ef52ece \
+ deps.dev/util/semver v0.0.0-20240109040450-1e316b822bc4 \
github.com/!burnt!sushi/toml v1.3.2 \
github.com/!cyclone!d!x/cyclonedx-go v0.8.0 \
github.com/!microsoft/go-winio v0.6.1 \
@@ -19,6 +21,7 @@ MODGO_MODULES = \
github.com/cncf/udpa/go v0.0.0-20220112060539-c52dc94e7fbe \
github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 \
github.com/cpuguy83/go-md2man/v2 v2.0.2 \
+ github.com/creack/pty v1.1.9 \
github.com/cyphar/filepath-securejoin v0.2.4 \
github.com/davecgh/go-spew v1.1.1 \
github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a \
@@ -26,6 +29,9 @@ MODGO_MODULES = \
github.com/envoyproxy/go-control-plane v0.11.1 \
github.com/envoyproxy/protoc-gen-validate v1.0.2 \
github.com/felixge/fgprof v0.9.3 \
+ github.com/gkampitakis/ciinfo v0.3.0 \
+ github.com/gkampitakis/go-diff v1.3.2 \
+ github.com/gkampitakis/go-snaps v0.4.12 \
github.com/gliderlabs/ssh v0.3.5 \
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 \
github.com/go-git/go-billy/v5 v5.5.0 \
@@ -39,14 +45,14 @@ MODGO_MODULES = \
github.com/google/pprof v0.0.0-20211214055906-6f57359322fd \
github.com/google/renameio v0.1.0 \
github.com/google/uuid v1.3.1 \
- github.com/hexops/gotextdiff v1.0.3 \
- github.com/ianlancetaylor/demangle v0.0.0-20231023195312-e2daf7ba7156 \
+ github.com/ianlancetaylor/demangle v0.0.0-20240117034632-964b1d53ca6c \
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 \
github.com/jedib0t/go-pretty/v6 v6.5.3 \
github.com/kevinburke/ssh_config v1.2.0 \
github.com/kr/pretty v0.3.1 \
github.com/kr/pty v1.1.1 \
github.com/kr/text v0.2.0 \
+ github.com/maruel/natural v1.1.0 \
github.com/mattn/go-runewidth v0.0.15 \
github.com/mmcloughlin/avo v0.5.0 \
github.com/onsi/gomega v1.27.10 \
@@ -55,6 +61,7 @@ MODGO_MODULES = \
github.com/package-url/packageurl-go v0.1.2 \
github.com/pandatix/go-cvss v0.6.2 \
github.com/pjbgf/sha1cd v0.3.0 \
+ github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e \
github.com/pkg/errors v0.9.1 \
github.com/pkg/profile v1.7.0 \
github.com/pmezard/go-difflib v1.0.0 \
@@ -69,6 +76,10 @@ MODGO_MODULES = \
github.com/stretchr/objx v0.5.0 \
github.com/stretchr/testify v1.8.4 \
github.com/terminalstatic/go-xsd-validate v0.1.5 \
+ github.com/tidwall/gjson v1.17.0 \
+ github.com/tidwall/match v1.1.1 \
+ github.com/tidwall/pretty v1.2.1 \
+ github.com/tidwall/sjson v1.2.5 \
github.com/urfave/cli/v2 v2.27.1 \
github.com/vmihailenco/msgpack/v4 v4.3.12 \
github.com/vmihailenco/tagparser v0.1.1 \
@@ -80,7 +91,7 @@ MODGO_MODULES = \
github.com/yuin/goldmark v1.4.13 \
github.com/zclconf/go-cty v1.10.0 \
golang.org/x/crypto v0.18.0 \
- golang.org/x/exp v0.0.0-20240112132812-db7319d0e0e3 \
+ golang.org/x/exp v0.0.0-20240119083558-1b970713d09a \
golang.org/x/mod v0.14.0 \
golang.org/x/net v0.20.0 \
golang.org/x/oauth2 v0.13.0 \
@@ -105,6 +116,7 @@ MODGO_MODULES = \
sigs.k8s.io/yaml v1.3.0

MODGO_MODFILES = \
+ deps.dev/api/v3alpha v0.0.0-20231114023923-e40c4d5c34e5 \
github.com/!microsoft/go-winio v0.5.2 \
github.com/!proton!mail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 \
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 \
@@ -120,6 +132,7 @@ MODGO_MODFILES = \
github.com/kr/pretty v0.1.0 \
github.com/kr/text v0.1.0 \
github.com/rivo/uniseg v0.2.0 \
+ github.com/rogpeppe/go-internal v1.9.0 \
github.com/sergi/go-diff v1.1.0 \
github.com/sirupsen/logrus v1.7.0 \
github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb \
@@ -130,6 +143,8 @@ MODGO_MODFILES = \
github.com/stretchr/testify v1.7.0 \
github.com/stretchr/testify v1.7.1 \
github.com/stretchr/testify v1.8.0 \
+ github.com/tidwall/gjson v1.14.2 \
+ github.com/tidwall/pretty v1.2.0 \
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 \
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 \
golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d \
@@ -142,6 +157,7 @@ MODGO_MODFILES = \
golang.org/x/mod v0.6.0 \
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
golang.org/x/mod v0.8.0 \
+ golang.org/x/mod v0.9.0 \
golang.org/x/net v0.0.0-20190603091049-60506f45cf65 \
golang.org/x/net v0.0.0-20190620200207-3b0461eec859 \
golang.org/x/net v0.0.0-20200301022130-244492dfa37a \
Hello,

Here's an update for osv-scanner which has been running fine on amd64.
Other tests?

changelog:
https://github.com/google/osv-scanner/releases/tag/v1.6.2

Thanks,
Lucas

No comments:

Post a Comment