Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/vuln/cmd/govulncheck: provide version flag #53867

Closed
hyangah opened this issue Jul 14, 2022 · 4 comments
Closed

x/vuln/cmd/govulncheck: provide version flag #53867

hyangah opened this issue Jul 14, 2022 · 4 comments
Labels
FeatureRequest Issues asking for a new feature that does not need a proposal. FrozenDueToAge NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. UX Issues that involve UXD/UXR input vulncheck or vulndb Issues for the x/vuln or x/vulndb repo

Comments

@hyangah
Copy link
Contributor

hyangah commented Jul 14, 2022

-v or --version

We can ask users to run go version -m when reporting an issue but this is more approachable.

@gopherbot gopherbot added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Jul 14, 2022
@gopherbot gopherbot added this to the Unreleased milestone Jul 14, 2022
@mknyszek mknyszek added NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. FeatureRequest Issues asking for a new feature that does not need a proposal. labels Jul 14, 2022
@julieqiu julieqiu removed the x/vuln label Sep 2, 2022
@seankhliao
Copy link
Member

Will govulncheck have tagged/released versions to report?

@corani
Copy link

corani commented Sep 30, 2022

In my CI job I've added a go version -m govulncheck | awk '$1 == "mod" { print $3 }' for the time being. A proper version flag would be appreciated.

@atc0005
Copy link

atc0005 commented Sep 30, 2022

Will govulncheck have tagged/released versions to report?

+1 for this idea.

Dependabot currently does not support tracking updates via pseudo versions, so having tagged releases would be really useful for any projects bundling it.

@zpavlinovic
Copy link
Contributor

govulncheck now supports --version flag.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
FeatureRequest Issues asking for a new feature that does not need a proposal. FrozenDueToAge NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. UX Issues that involve UXD/UXR input vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
Status: Done
Development

No branches or pull requests

8 participants