golang.org/x/vuln

all: update golang.org/x/toolsno-owners

#585315 opened 5 days ago by Zvonimir Pavlinovic

all: update x/tools to pick up CL 584295

#584978 opened 6 days ago by Dmitri Shuralyov

go.mod: update golang.org/x dependencies

#583596 opened 1 week ago by Gopher Robot

Revert "internal/scan: disallow multiple patterns in source mode"

#580116 opened 1 month ago by Zvonimir Pavlinovic

go.mod: update golang.org/x dependencies

#576637 opened 1 month ago by Gopher Robot

internal/openvex: add vex types

#575857 opened 1 month ago by Maceo Thompson

go.mod: update golang.org/x dependencies

#569016 opened 2 months ago by Gopher Robot

go.mod: update golang.org/x dependencies

#563555 opened 3 months ago by Gopher Robot

all: remove bash checksno-owners

#563055 opened 3 months ago by Zvonimir Pavlinovic

all: do go mod tidy test inside unit testsno-owners

#563035 opened 3 months ago by Zvonimir Pavlinovic

go.mod: update golang.org/x dependencies

#557875 opened 3 months ago by Gopher Robot

go.mod: update golang.org/x dependencies

#556135 opened 4 months ago by Gopher Robot

go.mod: update golang.org/x dependencies

#555515 opened 4 months ago by Gopher Robot

feat: support -hide-unused to suprress the ouput of informational sectionno-owners

#553956 opened 4 months ago by hitzhangjie

go.mod: update golang.org/x dependencies

#551695 opened 5 months ago by Gopher Robot

cmd/govulncheck/integration/stackrox: update vuln expectationno-owners

#551136 opened 5 months ago by Zvonimir Pavlinovic

cmd/gvctosarif: add result messageno-owners

#549378 opened 5 months ago by Zvonimir Pavlinovic

all: update tools to pick up bug fixesno-owners

#549377 opened 5 months ago by Zvonimir Pavlinovic

cmd/gvctosarif: add result stubs to run objectno-owners

#548336 opened 5 months ago by Zvonimir Pavlinovic

cmd/gvctosarif: add rulesno-owners

#548295 opened 5 months ago by Zvonimir Pavlinovic

cmd/gvctosarif: add govulncheck json handler for sarifno-owners

#548015 opened 5 months ago by Zvonimir Pavlinovic

cmd/gvctosarif: initialize sarif conversion toolno-owners

#547655 opened 5 months ago by Zvonimir Pavlinovic

testdata: Add more package/mod level testsno-owners

#545639 opened 5 months ago by Maceo Thompson

all: add logging to TestGovulncheckno-owners

#545335 opened 5 months ago by Zvonimir Pavlinovic

go.mod: update golang.org/x dependencies

#545180 opened 5 months ago by Gopher Robot

all: update to x/tools@v.15.0

#544295 opened 6 months ago by Tim King

cmd/vulncheck: add package level testsno-owners

#543163 opened 6 months ago by Maceo Thompson

internal/vulnchec: improve comments and names for imports level logic

#529259 opened 8 months ago by Zvonimir Pavlinovic

all: remove obsolete build constraintsno-owners

#526055 opened 8 months ago by Oleksandr Redko

all: update names for the files with go build tags

#522815 opened 8 months ago by Zvonimir Pavlinovic

internal/vulncheck/internal/buildinfo: support stripped darwin binariesno-owners

#522157 opened 9 months ago by Zvonimir Pavlinovic

all: go get golang.org/x/tools@74c255b

#520555 opened 9 months ago by Cuong Manh Le

internal/vulncheck/internal/gosym: fix typo

#518715 opened 9 months ago by Heschi Kreinick

internal/vulncheck/internal/gosym: fix misspelling

#518696 opened 9 months ago by Zvonimir Pavlinovic

vulncheck/internal/gosym: add support for go versions > 1.20

#513515 opened 9 months ago by Maceo Thompson

internal/vulncheck/internal/buildinfo: skip failing tests

#512435 opened 10 months ago by Jonathan Amsterdam

all: update docsno-owners

#508917 opened 10 months ago by Julie Qiu

README.md: updateno-owners

#508916 opened 10 months ago by Julie Qiu

internal/vulncheck/internal/buildinfo: remove unused field

#507275 opened 10 months ago by Zvonimir Pavlinovic

interna/vulncheck: call updateInitPositions

#506998 opened 10 months ago by Zvonimir Pavlinovic

all: replace 'interface{}' with 'any'no-owners

#502455 opened 11 months ago by Oleksandr Redko

internal/scan/template: rename stacks to tracesno-owners

#494516 opened 1 year ago by Ian Cottrell

all: add skips for tests that need to exec 'go build'

#492980 opened 1 year ago by Bryan C. Mills

internal/{client,semver}: move latestFixedVersion

#491661 opened 1 year ago by Tatiana Bradley

all: replace 'interface{}' with 'any'no-owners

#490235 opened 1 year ago by Oleksandr Redko

all_test: always run go vetno-owners

#489895 opened 1 year ago by Julie Qiu

all_test: use unparam function instead of binary

#489875 opened 1 year ago by Julie Qiu

don't skip short testsno-owners

#489776 opened 1 year ago by Julie Qiu

all_test: remove skipIfTrybot

#489775 opened 1 year ago by Julie Qiu

remove the tools imports

#489197 opened 1 year ago by Ian Cottrell

move header checks to a go test

#488502 opened 1 year ago by Ian Cottrell

move misspell check to a go test

#488501 opened 1 year ago by Ian Cottrell

move vet check to a go test

#488500 opened 1 year ago by Ian Cottrell

move unparam check to a go test

#488499 opened 1 year ago by Ian Cottrell

move staticcheck to a go test

#488498 opened 1 year ago by Ian Cottrell

delete check_vulncheck_result_version

#488497 opened 1 year ago by Ian Cottrell

moving govulncheck test from bash to normal test

#488496 opened 1 year ago by Ian Cottrell

split bash checks from go.mod tests

#488495 opened 1 year ago by Ian Cottrell

skip checks.bash in short mode

#487975 opened 1 year ago by Ian Cottrell

x/vuln: exit with status 2 when relevant

#487736 opened 1 year ago by Andrew Polukhin

all: require x/tools@master

#487435 opened 1 year ago by Bryan C. Mills

all: factor out checks for exec support and 'go build' support into a testenv package

#487357 opened 1 year ago by Bryan C. Mills

all: cleanup TODOsno-owners

#486835 opened 1 year ago by Julie Qiu

all: fix lint warnings

#486805 opened 1 year ago by Tatiana Bradley

internal/{client,vulncheck}: convert ByModule -> ByModulesno-owners

#486804 opened 1 year ago by Tatiana Bradley

cmd/govulncheck/testdata/vulndb: deleteno-owners

#486595 opened 1 year ago by Julie Qiu

internal/vulncheck/internal/buildinfo: clarify support for darwinno-owners

#486556 opened 1 year ago by Zvonimir Pavlinovic

internal/vulncheck/internal/buildinfo: deduplicate extracted symbolsno-owners

#486155 opened 1 year ago by Zvonimir Pavlinovic

cmd/govulncheck/testdata: add tests for -json binary mode

#486035 opened 1 year ago by Julie Qiu

internal/{client,vulncheck}: make Client a struct instead of an interfaceno-owners

#485905 opened 1 year ago by Tatiana Bradley

internal/{scan,test,vulncheck}: replace MockClient with NewInMemoryClientno-owners

#485904 opened 1 year ago by Tatiana Bradley

cmd/govulncheck/tesdata: add tests for default and verboseno-owners

#485901 opened 1 year ago by Julie Qiu

Review access change

#485900 opened 1 year ago by Julie Qiu

cmd/govulncheck/testdata: add test for json mode for multiple entry points

#485898 opened 1 year ago by Julie Qiu

internal/{scan,vulncheck}: remove package path from Receiverno-owners

#485416 opened 1 year ago by Tatiana Bradley

cmd/govulncheck/testdata: exercise receiver value in JSON testsno-owners

#485415 opened 1 year ago by Tatiana Bradley

all: use GO_BUILDER_NAME to detect if on trybots

#485235 opened 1 year ago by Julie Qiu

internal/{govulncheck,scan}: use snake case for Positionno-owners

#484775 opened 1 year ago by Tatiana Bradley

query modeno-owners

#483678 opened 1 year ago by Julie Qiu

Revert "Revert "internal/osv,result: add dependency tests""

#482839 opened 1 year ago by Julie Qiu

stashno-owners

#482838 opened 1 year ago by Julie Qiu

Revert "internal/osv,result: add dependency tests"

#482837 opened 1 year ago by Julie Qiu

delete verboseno-owners

#482835 opened 1 year ago by Julie Qiu

Client structno-owners

#482577 opened 1 year ago by Tatiana Bradley

filepath --> pathno-owners

#482344 opened 1 year ago by Tatiana Bradley

internal/{client,scan}: make vuln client Options a pointerno-owners

#482341 opened 1 year ago by Tatiana Bradley

internal/scan/template: do not display Found if emptyno-owners

#482247 opened 1 year ago by Julie Qiu

internal/scan{/template}: split Vulns into Affected and Unaffectedno-owners

#482246 opened 1 year ago by Julie Qiu

internal/scan{/template}: add commaseparate and pluralizeno-owners

#482245 opened 1 year ago by Julie Qiu

cmd/govulncheck/testdata/modules/vuln: add stdlib vuln

#481836 opened 1 year ago by Julie Qiu

internal/scan/template: move templatesno-owners

#481115 opened 1 year ago by Julie Qiu

README.md: update

#480615 opened 1 year ago by Julie Qiu

Revert "all_test: run default version of checks.bash locally with go test"

#479196 opened 1 year ago by Julie Qiu

all_test: run default version of checks.bash locally with go test

#478575 opened 1 year ago by Julie Qiu

all_test: update check for golang.org/x/exp modules

#477697 opened 1 year ago by Julie Qiu

go.mod: update staticcheck and unparam

#477696 opened 1 year ago by Julie Qiu

checks.bash: run govulncheckno-owners

#477427 opened 1 year ago by Julie Qiu

checks.bash: add trybot mode and fix error detected by staticcheckno-owners

#477426 opened 1 year ago by Julie Qiu

all: run shellcheck and fix existing errorsno-owners

#477425 opened 1 year ago by Julie Qiu

internal/result: add JSON struct tagsno-owners

#477421 opened 1 year ago by Julie Qiu

rename structs

#477419 opened 1 year ago by Julie Qiu

osv: move methods to internal

#475095 opened 1 year ago by Julie Qiu

internal/result: change methods to functionsno-owners

#474756 opened 1 year ago by Julie Qiu

internal/result: change methods to functions

#474480 opened 1 year ago by Julie Qiu

internal/result: move structs to separate packageno-owners

#474479 opened 1 year ago by Julie Qiu

checks.bash: always run staticcheck

#474224 opened 1 year ago by Julie Qiu

checks.bash: always run unparam

#474223 opened 1 year ago by Julie Qiu

client: remove unused multi-database functionalityno-owners

#474222 opened 1 year ago by Julie Qiu

client: split client.go into file.go and http.gono-owners

#474221 opened 1 year ago by Julie Qiu

client: remove unused source type

#474220 opened 1 year ago by Julie Qiu

stashno-owners

#474216 opened 1 year ago by Julie Qiu

flagsno-owners

#474215 opened 1 year ago by Julie Qiu

checks.bash: always run unparam and staticcheck

#473815 opened 1 year ago by Julie Qiu

all: remove use of golang.org/x/expno-owners

#471079 opened 1 year ago by Julie Qiu

all: don't include test dependencies in go.mod

#471078 opened 1 year ago by Julie Qiu

all: don't include test dependencies in go.mod

#471077 opened 1 year ago by Ian Cottrell

new OSV proposal

#470495 opened 1 year ago by Tatiana Bradley

vulncheck/internal/buildinfo: use go.mod precision for stripped binariesno-owners

#470377 opened 1 year ago by Zvonimir Pavlinovic

go.mod: update golang.org/x/tools to 193023cca0b7

#470035 opened 1 year ago by Koichi Shiraishi

README: fix link to privacy policyno-owners

#469655 opened 1 year ago by Sandro

all: update dependency to tools

#469295 opened 1 year ago by Tim King

vulncheck/internal: make READMEs markdownsno-owners

#468715 opened 1 year ago by Zvonimir Pavlinovic

vulncheck/internal/gosym: refactor code to match original codeno-owners

#468397 opened 1 year ago by Zvonimir Pavlinovic

vulncheck/internal/buildinfo: test symbol extraction for more platformsno-owners

#468396 opened 1 year ago by Zvonimir Pavlinovic

vulncheck/internal/binscan: refactor code to match original codeno-owners

#467155 opened 1 year ago by Zvonimir Pavlinovic

osv: proposal for new osv.Entry

#466937 opened 1 year ago by Tatiana Bradley

vulncheck/internal: remove noinline from unit tests

#466756 opened 1 year ago by Zvonimir Pavlinovic

vulncheck/internal/binscan: refactor scan codeno-owners

#466755 opened 1 year ago by Zvonimir Pavlinovic

all: update tools dependency

#461638 opened 1 year ago by Zvonimir Pavlinovic

vulncheck: include more references to functions

#460422 opened 1 year ago by Tim King

exp/govulncheck: DefaultCache now returns an error

#460421 opened 1 year ago by Tim King

vulncheck: build callgraph in parallel with fetching db

#460420 opened 1 year ago by Tim King

all: update dependency to tools

#458255 opened 1 year ago by Zvonimir Pavlinovic

Revert "cmd/govulncheck: add -cpuprofile flag"

#458176 opened 1 year ago by Zvonimir Pavlinovic

vulncheck: add support for generics

#456436 opened 1 year ago by Zvonimir Pavlinovic

all: upgrade x/tools to latest to pick up CL 451597

#456122 opened 1 year ago by Bryan C. Mills

osv: support more OSV fieldsno-owners

#454556 opened 1 year ago by Tatiana Bradley

vuln/osv: use generic

#454555 opened 1 year ago by Tatiana Bradley

vuln/osv: add Schema Version field to OSV entryno-owners

#451395 opened 2 years ago by Maceo Thompson

Un-shadow err variable when reading binaryno-owners

#449738 opened 2 years ago by Peter Ebden

x/vuln/internal: add old build constraint syntax

#449175 opened 2 years ago by Hana (Hyang-Ah) Kim

vuln/client: add UnescapeModulePath

#448838 opened 2 years ago by Tatiana Bradley

all: update tools dependencyno-owners

#448776 opened 2 years ago by Zvonimir Pavlinovic

all: cleanup govulncheck packagesno-owners

#448775 opened 2 years ago by Zvonimir Pavlinovic

vulncheck/internal/gosym: sync with new version of gosymno-owners

#443135 opened 2 years ago by Zvonimir Pavlinovic

client: query index in GetByModule for localSource

#442975 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: ignore withdrawn vulnerabilitiesno-owners

#442498 opened 2 years ago by Adam Shannon

vulncheck: release pointers to types.Package

#441895 opened 2 years ago by Zvonimir Pavlinovic

client: handle file URI scheme on windowsno-owners

#438175 opened 2 years ago by Hana (Hyang-Ah) Kim

exp/govulncheck: change Run to Main

#437864 opened 2 years ago by Julie Qiu

Revert "internal/govulncheck: add function for creating vulncheck.Config"

#437861 opened 2 years ago by Julie Qiu

Revert "internal/govulncheck: unexport CallInfo, GetCallInfo and LoadPackages"

#437859 opened 2 years ago by Julie Qiu

Revert "internal/govulncheck: add function for creating vulncheck.Config"

#437858 opened 2 years ago by Julie Qiu

stashno-owners

#437857 opened 2 years ago by Julie Qiu

client: check that GetByModule always calls Indexno-owners

#437288 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: use Go version at PATH as defaultno-owners

#437167 opened 2 years ago by Zvonimir Pavlinovic

osv: add credits field

#437096 opened 2 years ago by Aaqa Ishtyaq

cmd/govulncheck/govulnchecklib: inform user of Go version in source mode

#436909 opened 2 years ago by Zvonimir Pavlinovic

cmd/govulncheck/govulnchecklib: wrap Go version mismatch errorno-owners

#436275 opened 2 years ago by Zvonimir Pavlinovic

exp/govulncheck: add part of experimental govulncheck API

#435902 opened 2 years ago by Hana (Hyang-Ah) Kim

vulncheck: cache executable symbols in a mapno-owners

#435123 opened 2 years ago by Malte Isberner

vulncheck: remove resolved TODO

#432517 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: Source returns vulns for all GOOS/GOARCH

#432356 opened 2 years ago by Jonathan Amsterdam

cmd/govulncheck/govulnchecklib: add "summary" output mode

#432181 opened 2 years ago by Hana (Hyang-Ah) Kim

cmd/govulncheck/govulnchecklib: make main functionality public

#432180 opened 2 years ago by Hana (Hyang-Ah) Kim

osv: add omitempty to published and modified fields

#431435 opened 2 years ago by Damien Neil

vulncheck: let Source return deterministic results

#431275 opened 2 years ago by Hana (Hyang-Ah) Kim

client: match localSource.GetByModule behavior to httpSource

#431115 opened 2 years ago by Jamal Carvalho

osv: fix containsSemver

#430735 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: filter affected related but different modulesno-owners

#430684 opened 2 years ago by Zvonimir Pavlinovic

client: fix GetByID to return (nil, nil) for no matching entry

#430115 opened 2 years ago by Hana (Hyang-Ah) Kim

vulncheck: read GOOS and GOARCH from binary

#430035 opened 2 years ago by Zvonimir Pavlinovic

vulncheck/internal/gosym: support adjusted runtime.inlinedCall

#429575 opened 2 years ago by Michael Pratt

vulncheck/internal/gosym: bring up to date

#429496 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/gosym: minimize diffs with original

#429495 opened 2 years ago by Jonathan Amsterdam

cmd/govulncheck/internal/govulncheck: skip loading unnecessary data

#428895 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: update doc with simple wording change

#428014 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: update docs

#427894 opened 2 years ago by Julie Qiu

vulncheck: update docs

#427580 opened 2 years ago by Julie Qiu

client: escape module paths

#427575 opened 2 years ago by Jonathan Amsterdam

vulncheck: update doc.go

#427474 opened 2 years ago by Julie Qiu

client: add GetByAlias

#427079 opened 2 years ago by Jonathan Amsterdam

README.md: update to reflect changes

#427078 opened 2 years ago by Julie Qiu

client: factor out read-and-unmarshal

#427077 opened 2 years ago by Jonathan Amsterdam

client: use max last-mod time to detect staleness

#427074 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/gosym: use FuncSymName based on Go version in binary

#426934 opened 2 years ago by Zvonimir Pavlinovic

client: fix test

#426580 opened 2 years ago by Jonathan Amsterdam

client: use hash for index

#426576 opened 2 years ago by Jonathan Amsterdam

client: use hash for index

#426575 opened 2 years ago by Jonathan Amsterdam

client: use max last-mod time to detect staleness

#426235 opened 2 years ago by Jonathan Amsterdam

client: improve tests

#425702 opened 2 years ago by Jonathan Amsterdam

cmd/govulncheck/internal/govulncheck: use Fprintln with string builder

#425595 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: make PkgNode.ID deterministic

#425180 opened 2 years ago by Julie Qiu

cmd/govulncheck/testdata: add unaffected modno-owners

#425177 opened 2 years ago by Julie Qiu

osv, vulncheck: move GOOS/GOARCH into EcosystemSpecificImport

#424903 opened 2 years ago by Damien Neil

vulncheck: remove ResultVersion

#424754 opened 2 years ago by Jonathan Amsterdam

vulncheck: update for OSV schema changes

#424375 opened 2 years ago by Damien Neil

cmd/govulncheck/internal/govulncheck: canonicalize semvers

#423375 opened 2 years ago by Zvonimir Pavlinovic

vulncheck/internal: sync gosym with upstream

#422794 opened 2 years ago by Cuong Manh Le

vulncheck: temporarily skip failing tests

#422754 opened 2 years ago by Julie Qiu

vulncheck/internal/binscan: DO NOT SUBMIT

#422714 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: point limitations to https://go.dev/security/vulncheck#limitations

#421474 opened 2 years ago by Zvonimir Pavlinovic

x/vuln: add privacy policy to README

#421422 opened 2 years ago by Tatiana Bradley

vulncheck: update to most recent version of VTA

#421138 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add ResultVersion

#418974 opened 2 years ago by Jonathan Amsterdam

checks.bash: check if vulncheck.ResultVersion is modified

#418931 opened 2 years ago by Jonathan Amsterdam

A+C: delete AUTHORS and CONTRIBUTORS

#418927 opened 2 years ago by Russ Cox

vuln/vulncheck: include stdlib in module list

#418794 opened 2 years ago by Jonathan Amsterdam

integration: add new expected vulns for k8s

#418038 opened 2 years ago by Zvonimir Pavlinovic

cmd/govulncheck/internal/govulncheck: remove Source

#417640 opened 2 years ago by Hana (Hyang-Ah) Kim

vulncheck: warn users when Go version is not in semver format

#417457 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: skip building call graph if there are no vuln packages

#417456 opened 2 years ago by Zvonimir Pavlinovic

integration: change expectations for k8s in light of new vulns

#416294 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: fix few bugs in requires graph creation

#415795 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: find vulns in the standard libraryno-owners

#415614 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: improve loading error handling in tests

#415220 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: find vulns in the standard library

#415194 opened 2 years ago by Jonathan Amsterdam

vulncheck: make call stack search faster while preserving determinismno-owners

#412194 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: include call graph edges that could be missed due to recursionno-owners

#411354 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: remove additional meaningless string sorting for stacksno-owners

#410897 opened 2 years ago by Zvonimir Pavlinovic

client: update documentation

#410174 opened 2 years ago by Julie Qiu

vulncheck: remove synthetic nodes from call graph

#410054 opened 2 years ago by Zvonimir Pavlinovic

stashno-owners

#409454 opened 2 years ago by Julie Qiu

osv: document EcosystemSpecific

#408315 opened 2 years ago by Julie Qiu

cmd/vulncheck: UX updatesno-owners

#408314 opened 2 years ago by Julie Qiu

vulncheck: add link to vulncheck overview on golang.org

#408254 opened 2 years ago by Zvonimir Pavlinovic

cmd/govulncheck/internal/govulncheck: new package

#406580 opened 2 years ago by Jonathan Amsterdam

cmd/govulncheck/internal/govulncheck: restrict to 1.18 or higher

#406196 opened 2 years ago by Jonathan Amsterdam

cmd/govulcheck: update tools version to properly handle generics in ssa

#404115 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: fix formatting for doc.go

#403794 opened 2 years ago by Julie Qiu

vulncheck: clarifies documentationno-owners

#403138 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: adds doc.go with a brief overview of vulncheck

#403137 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: make Modules unique

#400118 opened 2 years ago by Jonathan Amsterdam

vulncheck: add module path to vulns in binary mode

#400117 opened 2 years ago by Jonathan Amsterdam

vulncheck: unexport moduleVulnerabilities methods

#400116 opened 2 years ago by Jonathan Amsterdam

vulncheck: make module IDs deterministic

#400115 opened 2 years ago by Jonathan Amsterdam

vulncheck: clarify documentation

#400114 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/binscan: set GOARCH on test

#399935 opened 2 years ago by Jonathan Amsterdam

vulncheck: return the module list

#399934 opened 2 years ago by Jonathan Amsterdam

all: gofmt

#399605 opened 2 years ago by Russ Cox

go.mod: update to latest go-cmdtest

#399475 opened 2 years ago by Jonathan Amsterdam

client: return error on bad local path

#399174 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/gosym: fix bug on 32-bit systems

#398757 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/binscan: extract inlined function names from binaries

#398756 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/binscan: add a test

#398755 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/buildtest: package for running go build

#398754 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/binscan: add a test

#398414 opened 2 years ago by Jonathan Amsterdam

vulncheck/internal/gosym: support inline tree

#398296 opened 2 years ago by Jonathan Amsterdam

all: change references to GCS bucket to vuln.go.dev

#398115 opened 2 years ago by Julie Qiu

vulncheck: improves handling of binary extensions in unit testing

#397454 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: skips android and plan9 tests for Binary

#397374 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: skip binary test

#396994 opened 2 years ago by Jonathan Amsterdam

vulncheck: comment out TestBinary

#396954 opened 2 years ago by Julie Qiu

DEMO: getting an import path sequence from a call stack

#395954 opened 2 years ago by Jonathan Amsterdam

vulncheck: move package osv to internal

#395276 opened 2 years ago by Julie Qiu

vulncheck: fix misspellings

#395155 opened 2 years ago by Jonathan Amsterdam

vulncheck: temporarily delete Binary

#395154 opened 2 years ago by Julie Qiu

vulncheck: don't define Binary in go1.18

#395095 opened 2 years ago by Julie Qiu

vulncheck: add derrors.Wrap to exported functions

#395094 opened 2 years ago by Julie Qiu

vulncheck: remove nested module

#395064 opened 2 years ago by Julie Qiu

vulncheck: remove isLocal check from fetchVulnerabilities

#395063 opened 2 years ago by Hana

vulncheck: fix buildSSA's FileSet handling

#395062 opened 2 years ago by Hana

vulncheck/internal/binscan: use debug/buildinfo to read module data

#395061 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: use a Go test to run a bash script

#395060 opened 2 years ago by Jonathan Amsterdam

vulncheck: add imports only mode for vuln detection in binaries

#395059 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add witness search logic for call stacks

#395058 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add witness search logic for import chains

#395057 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add more checks for nil package of a function

#395056 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add FuncNode.String

#395055 opened 2 years ago by Jonathan Amsterdam

vulncheck: check for nil package

#395054 opened 2 years ago by Jonathan Amsterdam

vulncheck: add witness data structures

#395053 opened 2 years ago by Zvonimir Pavlinovic

all: fix misspellings

#395052 opened 2 years ago by Julie Qiu

go.mod,go.sum: remove unused golang.org/x/vulndb

#395051 opened 2 years ago by Julie Qiu

vulncheck: make API use IDs for entries and proper names for nodes

#395050 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: fix support for packages whose every symbol is vulnerable

#395049 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: include proper filtering of vulnerabilities

#395048 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: fix skipping load of local packages

#395047 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: use new version of vulnerability database module

#395046 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: replace packages.Package with vulncheck.Package

#395045 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: introduce vulncheck.Package

#395044 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add support for callgraph source vuln detection

#395043 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add vulnerability detection for binaries

#395042 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add IDs to ModNode and PkgNode

#395041 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add forward slicing logic

#395040 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: populate module graph in Source

#395039 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: add support for Source imports only mode

#395038 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: load vulnerabilities from client to internal structures

#395037 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: introduce vulncheck module and core structures

#395036 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: introduce vulncheck module and core structures

#395035 opened 2 years ago by Zvonimir Pavlinovic

client: add LastModifiedTime

#394874 opened 2 years ago by Jonathan Amsterdam

vulncheck: add support for Source imports only mode

#394639 opened 2 years ago by Zvonimir Pavlinovic

exp/vulncheck: load vulnerabilities from client to internal structures

#394638 opened 2 years ago by Zvonimir Pavlinovic

vulncheck: introduce vulncheck module and core structures

#394637 opened 2 years ago by Zvonimir Pavlinovic

terraform: moved to x/vulndb

#373503 opened 2 years ago by Julie Qiu

srv: moved to x/vulndb

#373494 opened 2 years ago by Julie Qiu

terraform: adjust worker config

#373478 opened 2 years ago by Jonathan Amsterdam

vlint: merge into internal/report

#373158 opened 2 years ago by Julie Qiu

srv/cmd/vulnreport: add lintall

#373157 opened 2 years ago by Julie Qiu

srv: use replace directive for golang.org/x/vuln

#373114 opened 2 years ago by Julie Qiu

cmd/dbdiff,cmd/gendb: delete

#373004 opened 2 years ago by Julie Qiu

cmd/report2cve,cmd/vulnreport: merge

#373003 opened 2 years ago by Julie Qiu

cmd/report2cve,internal/report: refactor

#373002 opened 2 years ago by Julie Qiu

stash

#373000 opened 2 years ago by Julie Qiu

vlint: move to srv/vlint

#372999 opened 2 years ago by Julie Qiu

cmd/db,internal/database: merge gendb and dbdiff

#372998 opened 2 years ago by Julie Qiu

cmd/diff,internal/database: refactor

#372997 opened 2 years ago by Julie Qiu

srv/cmd/gendb,srv/internal/database: refactor

#372996 opened 2 years ago by Julie Qiu

client: move osv.DBIndex to package client

#372995 opened 2 years ago by Julie Qiu

srv: create nested module in x/vuln

#372994 opened 2 years ago by Julie Qiu

internal/database: moved logic from osv

#372814 opened 2 years ago by Julie Qiu

terraform: add github access token

#372185 opened 2 years ago by Jonathan Amsterdam

cmd/vulnreport: add cves to template

#372184 opened 2 years ago by Jonathan Amsterdam

internal/worker: improve issue template

#372183 opened 2 years ago by Jonathan Amsterdam

cmd/worker: create-issues: check for flags

#372182 opened 2 years ago by Jonathan Amsterdam

devtools/curl_worker.sh: POST for issues

#372181 opened 2 years ago by Jonathan Amsterdam

internal/worker: server improvements

#372180 opened 2 years ago by Jonathan Amsterdam

terraform: add scheduler job

#372179 opened 2 years ago by Jonathan Amsterdam

cmd/worker: list-updates: add ID, use local time

#372178 opened 2 years ago by Jonathan Amsterdam

terraform: increase timeout

#372177 opened 2 years ago by Jonathan Amsterdam

WIP: don't run test scripts on trybots

#372174 opened 2 years ago by Jonathan Amsterdam

internal/report: support standard library reports

#372054 opened 2 years ago by Julie Qiu

internal/worker: check product data for module paths

#371836 opened 2 years ago by Julie Qiu

internal/worker: factor out module path triage logic

#371835 opened 2 years ago by Julie Qiu

vendor: add dependencies from CL 371717

#371721 opened 2 years ago by Bryan C. Mills

all: vendor code dependencies prior to CL 371717

#371718 opened 2 years ago by Bryan C. Mills

vuln: require explicit versions of test tool dependencies

#371717 opened 2 years ago by Bryan C. Mills

vuln: run "go mod tidy" to sync dependencies

#371716 opened 2 years ago by Bryan C. Mills

vuln: check for "bash" before using it to execute checks

#371714 opened 2 years ago by Bryan C. Mills

terraform: increase worker memory

#371600 opened 2 years ago by Jonathan Amsterdam

cmd/worker: add show command

#371599 opened 2 years ago by Jonathan Amsterdam

vuln: reports can have multiple CVEs

#371596 opened 2 years ago by Jonathan Amsterdam

internal/worker: add more false positives

#371594 opened 2 years ago by Jonathan Amsterdam

internal/worker: add non-Go modules

#371395 opened 2 years ago by Julie Qiu

go.mod,internal/worker: fix minor issues

#371334 opened 2 years ago by Jonathan Amsterdam

internal/worker: fix error text

#371294 opened 2 years ago by Julie Qiu

internal/worker: check Go snyk.io URLs in cve triage

#370884 opened 2 years ago by Julie Qiu

internal/worker: fix staticcheck error

#370883 opened 2 years ago by Julie Qiu

internal/worker: identify modules by known package hosts

#370875 opened 2 years ago by Julie Qiu

internal/worker: minor test changes

#370841 opened 2 years ago by Jonathan Amsterdam

internal/worker: use printsrc to generate false positive data

#370839 opened 2 years ago by Jonathan Amsterdam

internal/worker: handle false positive changes

#370838 opened 2 years ago by Jonathan Amsterdam

internal/worker: store CVERecord change history

#370837 opened 2 years ago by Jonathan Amsterdam

internal/worker: improve update test

#370836 opened 2 years ago by Jonathan Amsterdam

{cmd,internal}/worker: support using a list of known modules

#370835 opened 2 years ago by Jonathan Amsterdam

internal/worker: add/remove negative prefix patterns

#370834 opened 2 years ago by Jonathan Amsterdam

internal/worker: make pkgsite QPS configurable

#370816 opened 2 years ago by Jonathan Amsterdam

terraform: run fmt

#370815 opened 2 years ago by Jonathan Amsterdam

terraform: add env var for pkgsite QPS

#370814 opened 2 years ago by Jonathan Amsterdam

internal/worker: add server routes

#370754 opened 2 years ago by Jonathan Amsterdam

internal/worker: fix stdlib CVE triage logic

#370674 opened 2 years ago by Julie Qiu

internal/worker/store: add GetCVERecord

#370494 opened 2 years ago by Jonathan Amsterdam

internal/worker: code to insert initial false positives

#370395 opened 2 years ago by Jonathan Amsterdam

internal/worker: don't call pkgsite for known non-modules

#370394 opened 2 years ago by Jonathan Amsterdam

{internal/cmd}/worker: add Config struct

#370214 opened 2 years ago by Jonathan Amsterdam

vuln: run checks with go test

#370114 opened 2 years ago by Jonathan Amsterdam

internal/worker: run tests only on go 1.17 or higher

#370094 opened 2 years ago by Jonathan Amsterdam

terraform: config for worker load balancer

#370014 opened 2 years ago by Jonathan Amsterdam

internal/worker: skip TestNewBody

#369994 opened 2 years ago by Julie Qiu

internal/worker: add triageResult

#369874 opened 2 years ago by Julie Qiu

.gitignore: ignore terraform files

#369834 opened 2 years ago by Jonathan Amsterdam

cmd/worker: display module when listing CVE records

#369755 opened 2 years ago by Jonathan Amsterdam

internal/worker: add a TriageReason for known vulns

#369754 opened 2 years ago by Jonathan Amsterdam

internal/worker: use candidate module path

#369750 opened 2 years ago by Julie Qiu

internal/worker add candidateModulePaths

#369749 opened 2 years ago by Julie Qiu

internal/worker: check Go snyk.io URLs in cve triage

#369746 opened 2 years ago by Julie Qiu

internal/worker: check product data for module paths

#369745 opened 2 years ago by Julie Qiu

cmd/vulnreport: add lint

#369479 opened 2 years ago by Julie Qiu

cmd/vulnreport: add command to create report

#369478 opened 2 years ago by Julie Qiu

internal/worker: remember module and CVE to create issue

#368863 opened 2 years ago by Jonathan Amsterdam

all.bash,devtools.ci: fix kokoro problems

#368862 opened 2 years ago by Jonathan Amsterdam

internal/worker: address earlier CL comments

#368861 opened 2 years ago by Jonathan Amsterdam

{cmd,internal}/worker: create issues

#368860 opened 2 years ago by Jonathan Amsterdam

internal/worker: low-level issue functionality

#368859 opened 2 years ago by Jonathan Amsterdam

internal/worker: refactor doUpdate

#368858 opened 2 years ago by Jonathan Amsterdam

internal/worker: check against vuln DB

#368857 opened 2 years ago by Jonathan Amsterdam

internal/worker: use HEAD requests to pkgsite

#368856 opened 2 years ago by Jonathan Amsterdam

internal/worker: home page

#368855 opened 2 years ago by Jonathan Amsterdam

{cmd,internal}/worker: address CL comments

#368854 opened 2 years ago by Jonathan Amsterdam

internal/worker: optimize updates by comparing tree hashes

#368597 opened 2 years ago by Jonathan Amsterdam

{cmd/internal}/worker: add update command

#368596 opened 2 years ago by Jonathan Amsterdam

internal/worker/store: minor changes

#368595 opened 2 years ago by Jonathan Amsterdam

cmd/worker: support command-line mode; add list-updates

#368494 opened 2 years ago by Jonathan Amsterdam

internal/worker: move cvetriage files to cmd/cvetriage

#368435 opened 2 years ago by Jonathan Amsterdam

internal/worker: function to call pkgsite to triage

#368434 opened 2 years ago by Jonathan Amsterdam

internal/worker: rename UpdateRecord to CommitUpdateRecord

#368295 opened 2 years ago by Jonathan Amsterdam

internal/worker: initial code for server

#368294 opened 2 years ago by Jonathan Amsterdam

all.bash: fail if there are errors

#368274 opened 2 years ago by Jonathan Amsterdam

all.bash: simplify some checker args

#368115 opened 2 years ago by Jonathan Amsterdam

devtools/ci.sh: script for kokoro ci

#368114 opened 2 years ago by Jonathan Amsterdam

internal/worker: fix problems found by static checkers

#367796 opened 2 years ago by Jonathan Amsterdam

all.bash: install go binaries the modern way

#367795 opened 2 years ago by Jonathan Amsterdam

internal/worker/log: logging support

#367794 opened 2 years ago by Jonathan Amsterdam

internal/worker: update changed CVEs

#366874 opened 2 years ago by Jonathan Amsterdam

internal/worker: doUpdate function

#366474 opened 2 years ago by Jonathan Amsterdam

internal/worker/store: Firestore implementation

#366155 opened 2 years ago by Jonathan Amsterdam

internal/worker/store: storage layout for worker

#366154 opened 2 years ago by Jonathan Amsterdam

internal/worker: minor changes to repo functions

#365814 opened 2 years ago by Jonathan Amsterdam

client: add context arg

#365054 opened 2 years ago by Jonathan Amsterdam

internal/worker: add standard library keywords

#362240 opened 2 years ago by Julie Qiu

internal/worker: refactor CVE parsing logic

#362239 opened 2 years ago by Julie Qiu

internal/worker: move cve logic add cve.go

#362238 opened 2 years ago by Julie Qiu

internal/worker: add triager

#362237 opened 2 years ago by Julie Qiu

internal/worker: pass CVE states to Run

#362236 opened 2 years ago by Julie Qiu

internal/worker: move repo logic to repo.go

#362235 opened 2 years ago by Julie Qiu

internal/worker: renamed from internal/cvelist

#362234 opened 2 years ago by Julie Qiu

internal/worker: update

#362115 opened 2 years ago by Jonathan Amsterdam

internal/worker: repo functions

#362114 opened 2 years ago by Jonathan Amsterdam

internal/cveschema: use actual state strings

#362019 opened 2 years ago by Jonathan Amsterdam

internal/worker: storage implementations

#362018 opened 2 years ago by Jonathan Amsterdam

internal/worker/store: storage layout for worker

#362016 opened 2 years ago by Jonathan Amsterdam

internal/cveschema: rename fields

#361210 opened 2 years ago by Jonathan Amsterdam

stash: past CVE triage stats

#361034 opened 2 years ago by Julie Qiu

cmd/cvetriage,internal/cvelist: add option to read local repono-owners

#360839 opened 2 years ago by Julie Qiu

internal/cvelist: triaged based on data_version

#360719 opened 2 years ago by Julie Qiu

deploy: delete

#360714 opened 2 years ago by Julie Qiu

cmd/linter: delete

#360537 opened 2 years ago by Julie Qiu

cmd/gendb,deploy: delete

#360536 opened 2 years ago by Julie Qiu

format.md,template,new-vuln.sh: delete

#360535 opened 2 years ago by Julie Qiu

vlint: add LintReport

#360534 opened 2 years ago by Julie Qiu

README.md: updated

#360440 opened 2 years ago by Julie Qiu

delete lint_test.go

#360439 opened 2 years ago by Julie Qiu

lint: delete lint_test.go

#360438 opened 2 years ago by Julie Qiu

all: change references from vulndb to vuln

#360437 opened 2 years ago by Julie Qiu

reports: delete

#360435 opened 2 years ago by Julie Qiu