Cannot build with go install with 1.27rc2

[clin1234]

Question

gup:ERROR: [298/354] trivy.exe: can't install github.com/aquasecurity/trivy/cmd/trivy:

github.com/aquasecurity/trivy/pkg/x/json

go\pkg\mod\github.com\aquasecurity\trivy@v0.71.2\pkg\x\json\json.go:109:16: undefined: json.SkipFunc

Target

None

Scanner

None

Output Format

None

Mode

None

Operating System

No response

Version

No response

[nikpivkin]

It's worth checking what the LLM generates, since your comment is misleading.

[nikpivkin]

Hi @clin1234 !

The json.SkipFunc error was removed in favor of errors.ErrUnsupported in one of the commits from the json/v2 package (see https://go-review.googlesource.com/c/go/+/745041), which is a breaking change. We will refactor the code and use the new error when we upgrade Go to 1.27.

[VectorPeak]

go install github.com/aquasecurity/trivy/cmd/trivy@v0.71.2 is picking up the Go 1.27rc2 toolchain, and that toolchain no longer has the same experimental encoding/json/v2 API Trivy was built against.

For v0.71.2, use the Go version declared by the module/build setup rather than 1.27rc2:

GOTOOLCHAIN=go1.26.3 go install github.com/aquasecurity/trivy/cmd/trivy@v0.71.2

Or install/use a Trivy release that has been updated for the Go 1.27 json/v2 API once that lands. This is not related to target OS/scanner mode/output format; it is just the compiler/toolchain API changing underneath the released source.

---

If my answer solved your problem, please mark it as answered the question — I'm here to help, and honestly I'm also collecting Galaxy Brain badges along the way 😆