{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":423907006,"defaultBranch":"master","name":"vuln","ownerLogin":"golang","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-11-02T15:53:16.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/4314092?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1716409818.0","currentOid":""},"activityList":{"items":[{"before":"486fd2384a39a632a0e5b003e1840d49d1db7e86","after":"c6f848552abbf1b592d566d225e207ed20cf2bc2","ref":"refs/heads/master","pushedAt":"2024-05-24T19:44:39.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"cmd/govulncheck: record scan mode telemetry\n\nAdd the new `govulncheck/mode:{source,binary,convert,query,extract}` counter,\nand collect the crash report `crash/crash`.\n\nChange-Id: I53dfa5640bc38ae2a0d55302a3bd637c57a984e9\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/588255\nLUCI-TryBot-Result: Go LUCI \nReviewed-by: Zvonimir Pavlinovic ","shortMessageHtmlLink":"cmd/govulncheck: record scan mode telemetry"}},{"before":"6b0fd5601b4a69285e464ec05957800bf63e4d0e","after":"486fd2384a39a632a0e5b003e1840d49d1db7e86","ref":"refs/heads/master","pushedAt":"2024-05-21T21:23:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"all: remove unit tests for staticcheck, unparam, and spellcheck\n\nThose should not be unit tests and, more importantly, they should not be\nrunning on builders.\n\nChange-Id: I70504fedce3bad17ac408dc6f208d61fb7bd6071\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/587097\nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"all: remove unit tests for staticcheck, unparam, and spellcheck"}},{"before":"7b455eea68df4fad0d78f08d7811f818426afc30","after":"6b0fd5601b4a69285e464ec05957800bf63e4d0e","ref":"refs/heads/master","pushedAt":"2024-05-21T21:02:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif,cmd/govulncheck: publicize sarif\n\nAlso, add and improve documentation.\n\nFixes golang/go#61347\n\nChange-Id: Ia631615b40b9d23be6efa615b573be6c465fa36b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580955\nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic ","shortMessageHtmlLink":"internal/sarif,cmd/govulncheck: publicize sarif"}},{"before":"7ed0faae83da959585ab1226aedda8b2e1eff849","after":"7b455eea68df4fad0d78f08d7811f818426afc30","ref":"refs/heads/master","pushedAt":"2024-05-15T19:10:44.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/vulncheck: load source code for scan symbol mode only\n\nFor package and module scan mode, loading code is not needed and it just\ntakes longer. With this CL, the loading for these mode drops down by\n~40%.\n\nChange-Id: Ibdaa98c50e3e90ba1696d8b9706589ff4c279e17\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/585335\nLUCI-TryBot-Result: Go LUCI \nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/vulncheck: load source code for scan symbol mode only"}},{"before":"122c809ebf2367fd3394cfcc7d9459ce708052c9","after":"7ed0faae83da959585ab1226aedda8b2e1eff849","ref":"refs/heads/master","pushedAt":"2024-05-15T18:35:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"all: update golang.org/x/tools\n\nThe addition of range-over-func to slices package is causing govulncheck\nto fail on gotip due to ssa not being able to handle the new Go feature.\nThe version of tools at master contains a temporary fix. We use it for\nnow until tools gets tagged.\n\nChange-Id: If1a7c196d950a8494f6ee7c4d59b539ee0020c35\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/585315\nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"all: update golang.org/x/tools"}},{"before":"d837ff86426137299700241b0997c011091800ff","after":"122c809ebf2367fd3394cfcc7d9459ce708052c9","ref":"refs/heads/master","pushedAt":"2024-05-15T18:28:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/vulncheck: emit progress message instead of warning\n\nNow that progress messages are hidden under the verbose flag, we should\nnot be printing anything with fmt.\n\nChange-Id: I30b247ca1793ea7bcc6e4a68e1f0633d3262d7f1\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/581276\nLUCI-TryBot-Result: Go LUCI \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell ","shortMessageHtmlLink":"internal/vulncheck: emit progress message instead of warning"}},{"before":"4a8a6ffa0362e038bb7b9d56cc2fe09d0e4fd5ff","after":"d837ff86426137299700241b0997c011091800ff","ref":"refs/heads/master","pushedAt":"2024-05-15T18:27:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/scan: improve textual output for binary traces\n\nThere are no traces in binary mode, just vulnerable symbols detected.\n\nChange-Id: I9f1ccc83c0527537d8d42d7397de0562ed8d2842\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/577675\nReviewed-by: Ian Cottrell \nLUCI-TryBot-Result: Go LUCI \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/scan: improve textual output for binary traces"}},{"before":"052eac784b099e7cc1a3864eb927288b196f2000","after":"4a8a6ffa0362e038bb7b9d56cc2fe09d0e4fd5ff","ref":"refs/heads/master","pushedAt":"2024-05-15T15:16:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/buildinfo: avoid panic on nil symbol for elf\n\nFor very old binaries or binaries built with forks of Go, looking up\nan elf symbol that does not exists might not return an error, yet\njust a nil symbol, resulting in a panic. We hence make an additional\ncheck. This is also consistent with other binary formats.\n\nChange-Id: I488eeca4ada27a0be48c7da82ca7b1391a7ce394\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/585336\nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic ","shortMessageHtmlLink":"internal/buildinfo: avoid panic on nil symbol for elf"}},{"before":"93d3090660cdfbfe5dfa57dfc366438d35283648","after":"052eac784b099e7cc1a3864eb927288b196f2000","ref":"refs/heads/master","pushedAt":"2024-05-08T21:38:39.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: improve GOMODCACHE relative paths\n\nThe paths are now indeed relative to %GOMODCACHE%.\n\nChange-Id: I445f95dfdcda4bf053b28917482f9a39866f9dd3\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/581235\nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"internal/sarif: improve GOMODCACHE relative paths"}},{"before":"0e39fee41378bbb3678d501b1b19193c0060f540","after":"93d3090660cdfbfe5dfa57dfc366438d35283648","ref":"refs/heads/master","pushedAt":"2024-05-08T21:38:26.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: add version to module info for locations\n\nThis allows makes module information complete so that users can compute\nlocal paths.\n\nChange-Id: I8cedf77908b825d7e66ac9d7a9a075804f207c66\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/581195\nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/sarif: add version to module info for locations"}},{"before":"13badf9386e0b245c28f42973d1d0c413b00933a","after":"0e39fee41378bbb3678d501b1b19193c0060f540","ref":"refs/heads/master","pushedAt":"2024-05-08T21:38:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: remove originalURIBaseIds\n\nWe don't need it and it is not actually needed. Sarif validator is fine\nwithout it and so is Github Code scanning.\n\nUpdates golang/go#61347\n\nChange-Id: I1d368422935fddd6b9960917010287ae7bca2683\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/581076\nRun-TryBot: Zvonimir Pavlinovic \nAuto-Submit: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI \nReviewed-by: Ian Cottrell \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/sarif: remove originalURIBaseIds"}},{"before":"63adf478672df31518e0b86dce5b8fd1cc7811ae","after":"13badf9386e0b245c28f42973d1d0c413b00933a","ref":"refs/heads/master","pushedAt":"2024-05-06T19:09:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: I50adebd9351eb4551d4a34ecff85c4603cbe1721\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/583596\nAuto-Submit: Gopher Robot \nReviewed-by: Cherry Mui \nReviewed-by: Than McIntosh \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"go.mod: update golang.org/x dependencies"}},{"before":"230480c89604dac471233326d383077451c95875","after":"63adf478672df31518e0b86dce5b8fd1cc7811ae","ref":"refs/heads/master","pushedAt":"2024-04-23T17:49:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/gosym: preallocate inlined call slice\n\nLineTable.InlineTree allocates a slice whose length is known in advance.\nPreallocate it to avoid reallocations.\n\nChange-Id: I1939f6d4e956ccb5d2b68e10695622784d8ced38\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/581135\nRun-TryBot: Quim Muntal \nReviewed-by: Joedian Reid \nTryBot-Result: Gopher Robot \nAuto-Submit: Quim Muntal \nLUCI-TryBot-Result: Go LUCI \nReviewed-by: Zvonimir Pavlinovic ","shortMessageHtmlLink":"internal/gosym: preallocate inlined call slice"}},{"before":"086b27baf0be2baae021afc6bce0b55e41683a81","after":"230480c89604dac471233326d383077451c95875","ref":"refs/heads/master","pushedAt":"2024-04-22T17:30:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/vulncheck: improve progress message for binaries\n\nChange-Id: Ib5b4b335e44d3ca3e72f4772b7e03fca615e7ae7\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580158\nAuto-Submit: Zvonimir Pavlinovic \nReviewed-by: Maceo Thompson \nRun-TryBot: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/vulncheck: improve progress message for binaries"}},{"before":"f3bc44a739cce2bd827f651bd1b67bac7500426e","after":"086b27baf0be2baae021afc6bce0b55e41683a81","ref":"refs/heads/master","pushedAt":"2024-04-18T21:53:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/vulncheck: emit fetch db and vuln checking progress messages\n\nFixes golang/go#66872\n\nChange-Id: I32c92767a62b3425bff0f1496c76e47170d39885\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580216\nRun-TryBot: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell ","shortMessageHtmlLink":"internal/vulncheck: emit fetch db and vuln checking progress messages"}},{"before":"640d2c89314d04f5004f48c06c34dd42fb83c506","after":"f3bc44a739cce2bd827f651bd1b67bac7500426e","ref":"refs/heads/master","pushedAt":"2024-04-18T21:51:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/scan: print progress messages only in verbose mode\n\nAnd also update the documentation.\n\nUpdates golang/go#66872\n\nChange-Id: I73f0c7e9c1f46b66711b878748bf78571d26f66b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580175\nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot \nReviewed-by: Ian Cottrell \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"internal/scan: print progress messages only in verbose mode"}},{"before":"47dcf00735a68e66cac854ee66654f2b6c845daf","after":"640d2c89314d04f5004f48c06c34dd42fb83c506","ref":"refs/heads/master","pushedAt":"2024-04-18T21:51:29.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/scan: refactor flag usage in text handler\n\nMake the flag update the handler and change the name of the verbose\nfield in the handler.\n\nChange-Id: I9a64eaa842ad9ffd88e4358dfe5f140dd83eb038\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580155\nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"internal/scan: refactor flag usage in text handler"}},{"before":"9aaa103722622b1e8eea122cf1a6f30b68a76306","after":"47dcf00735a68e66cac854ee66654f2b6c845daf","ref":"refs/heads/master","pushedAt":"2024-04-18T20:23:41.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"Revert \"internal/scan: disallow multiple patterns in source mode\"\n\nThis reverts commit cb903c58aa2991dabf7664852fa06a13d12edcd6.\n\nReason for revert: We decided to actually allow this now.\n\nChange-Id: Ifce8024deceaa4624411cb7706070f72cfd93954\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/580116\nRun-TryBot: Zvonimir Pavlinovic \nReviewed-by: Ian Cottrell \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"Revert \"internal/scan: disallow multiple patterns in source mode\""}},{"before":"cb903c58aa2991dabf7664852fa06a13d12edcd6","after":"9aaa103722622b1e8eea122cf1a6f30b68a76306","ref":"refs/heads/master","pushedAt":"2024-04-18T19:52:15.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: add missing required Message field\n\nOtherwise, sarif validator complains. Also add default position values\nin case the position is not available.\n\nUpdates golang/go#61347\n\nChange-Id: Id30aa3cf352c35df841075e28ca9ffa1c17576ff\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/558017\nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot \nRun-TryBot: Zvonimir Pavlinovic \nReviewed-by: Ian Cottrell ","shortMessageHtmlLink":"internal/sarif: add missing required Message field"}},{"before":"7ee5898c6d9bdbfdfdb1748f000be08ef72763d7","after":"cb903c58aa2991dabf7664852fa06a13d12edcd6","ref":"refs/heads/master","pushedAt":"2024-04-17T17:41:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/scan: disallow multiple patterns in source mode\n\nOtherwise, other patterns get silently skipped.\n\nAlso improve some wording.\n\nChange-Id: I934659fa0edb8ac2b6a7326ecdd18608e1389f6a\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/579735\nRun-TryBot: Zvonimir Pavlinovic \nReviewed-by: Ian Cottrell \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/scan: disallow multiple patterns in source mode"}},{"before":"a7188c690e1dbf65a6b855e74618821c711ea516","after":"7ee5898c6d9bdbfdfdb1748f000be08ef72763d7","ref":"refs/heads/master","pushedAt":"2024-04-17T16:04:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/vulncheck: use new improved DeleteSyntheticNodes\n\nChange-Id: I9314ccf3ad5960375a529acf8b83b0867a95bf61\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/579635\nLUCI-TryBot-Result: Go LUCI \nReviewed-by: Ian Cottrell \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"internal/vulncheck: use new improved DeleteSyntheticNodes"}},{"before":"4b737a97851cc7a7f9b87cf5d123960d55e50006","after":"a7188c690e1dbf65a6b855e74618821c711ea516","ref":"refs/heads/master","pushedAt":"2024-04-15T19:47:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/openvex: add vex types\n\nupdates golang/go#62486\n\nChange-Id: I550ca00f1209e21ee3fef91128d0522494b9d994\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/575857\nLUCI-TryBot-Result: Go LUCI \nReviewed-by: Zvonimir Pavlinovic ","shortMessageHtmlLink":"internal/openvex: add vex types"}},{"before":"7bf0c05f14670d9de8f2881314dd3e7dabb4a14c","after":"4b737a97851cc7a7f9b87cf5d123960d55e50006","ref":"refs/heads/master","pushedAt":"2024-04-15T19:20:04.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: compute relative paths for findings\n\nAnd also make sure the paths are not added in binary mode.\n\nUpdates golang/go#61347\n\nChange-Id: If48fe57215cdecb01b8b687fbe042aae584f1d6d\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/558016\nReviewed-by: Maceo Thompson \nTryBot-Result: Gopher Robot \nLUCI-TryBot-Result: Go LUCI \nRun-TryBot: Zvonimir Pavlinovic ","shortMessageHtmlLink":"internal/sarif: compute relative paths for findings"}},{"before":"7b0e650379b05ed4e8106ef4874492f25ec05fe5","after":"7bf0c05f14670d9de8f2881314dd3e7dabb4a14c","ref":"refs/heads/master","pushedAt":"2024-04-05T16:53:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: remove unused field\n\nChange-Id: I3b4139be32ce5fe03cbe19b135f186bd97e5a636\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/576560\nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot \nRun-TryBot: Zvonimir Pavlinovic \nReviewed-by: Maceo Thompson ","shortMessageHtmlLink":"internal/sarif: remove unused field"}},{"before":"f1b1098b221539291c214e17e263e7d014a9761f","after":"7b0e650379b05ed4e8106ef4874492f25ec05fe5","ref":"refs/heads/master","pushedAt":"2024-04-04T23:13:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"go.mod: update golang.org/x dependencies\n\nUpdate golang.org/x dependencies to their latest tagged versions.\n\nChange-Id: Ibf3e5509131145b2e05c59338107ad5c87fe9691\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/576637\nReviewed-by: Than McIntosh \nAuto-Submit: Gopher Robot \nReviewed-by: Dmitri Shuralyov \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"go.mod: update golang.org/x dependencies"}},{"before":"33791bcb641951845fcda445b39dd58c870b9330","after":"f1b1098b221539291c214e17e263e7d014a9761f","ref":"refs/heads/master","pushedAt":"2024-04-03T20:07:57.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif,internal/scan,internal/traces: clean up tests\n\nAnd some redundant code.\n\nChange-Id: I37483214c11ed4865698279f4c287e9d75af613b\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/576095\nRun-TryBot: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot \nReviewed-by: Maceo Thompson ","shortMessageHtmlLink":"internal/sarif,internal/scan,internal/traces: clean up tests"}},{"before":"d00c170d001daeff7d121991f4d994c1ad259b40","after":"33791bcb641951845fcda445b39dd58c870b9330","ref":"refs/heads/master","pushedAt":"2024-04-03T17:31:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: add region part of the physical location\n\nUpdates golang/go#61347\n\nChange-Id: I725012e4b028b879a0d1720fc47632e76e699c04\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/552955\nReviewed-by: Ian Cottrell \nTryBot-Result: Gopher Robot \nRun-TryBot: Zvonimir Pavlinovic \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"internal/sarif: add region part of the physical location"}},{"before":"9fbf042ea52d082b8757c09220a2e259d6928239","after":"d00c170d001daeff7d121991f4d994c1ad259b40","ref":"refs/heads/master","pushedAt":"2024-04-03T14:18:43.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"internal/sarif: add code flows\n\nA code flow is a compact representation of a trace used for the textual\noutput of govulncheck. For that purpose, the logic for trace compaction\nis extracted into a separate internal package traces.\n\nWe also add the message portion of Location object for code flows to\nreduce the number of CLs; the actual physical region part will come in\nfollowing CLs. To make things consistent, we also add the Message part\nof the location for stacks.\n\nUpdates golang/go#61347\n\nChange-Id: I99065a7aab7aa794e7a08687cb4055bc21a610f8\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/551375\nTryBot-Result: Gopher Robot \nRun-TryBot: Zvonimir Pavlinovic \nReviewed-by: Maceo Thompson \nLUCI-TryBot-Result: Go LUCI ","shortMessageHtmlLink":"internal/sarif: add code flows"}},{"before":"efaa3cef72f7613a1c46ab7fd132de0dee77dcca","after":"9fbf042ea52d082b8757c09220a2e259d6928239","ref":"refs/heads/master","pushedAt":"2024-03-28T22:35:47.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"cmd/govulncheck: clean up test\n\nstaticcheck was complaining\n\nChange-Id: I67c965b01f67ea907fdb5fa9b7a37447a49b9bde\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/575135\nRun-TryBot: Zvonimir Pavlinovic \nReviewed-by: Ian Cottrell \nLUCI-TryBot-Result: Go LUCI \nTryBot-Result: Gopher Robot ","shortMessageHtmlLink":"cmd/govulncheck: clean up test"}},{"before":"7838670b334c6ba85440789f2f3172612cc7154b","after":"efaa3cef72f7613a1c46ab7fd132de0dee77dcca","ref":"refs/heads/master","pushedAt":"2024-03-28T20:35:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"gopherbot","name":"GopherBot","path":"/gopherbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8566911?s=80&v=4"},"commit":{"message":"cmd/govulncheck: make test case config data\n\nInstead of listing test cases and their configuration in the unit test,\nwe now make the configuration part of the test case, merging it with\nfixups. This allows us to enumerate test cases instead of listing them\nexplicitly in main_test.go.\n\nChange-Id: I75448553035746cd9eb21e6cdc01bae7f13c2327\nReviewed-on: https://go-review.googlesource.com/c/vuln/+/574936\nLUCI-TryBot-Result: Go LUCI \nRun-TryBot: Zvonimir Pavlinovic \nTryBot-Result: Gopher Robot \nReviewed-by: Maceo Thompson ","shortMessageHtmlLink":"cmd/govulncheck: make test case config data"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEU1vT9gA","startCursor":null,"endCursor":null}},"title":"Activity ยท golang/vuln"}