vulndb

Tatiana Bradley ebcb244a81 cmd/vulnreport: check if packages exist in vulnreport fix Add a simple check for package existence in vulnreport fix, which pings pkg.go.dev to determine if a package exists. This is more likely to succeed (and faster) than the package/symbol check which downloads the whole package. We now skip this symbol-check when there are no symbols listed. There are still some cases in which this fails incorrectly (e.g. if pkgsite for some reason couldn't cache the given package/version), so the check can be bypassed. Change-Id: I922eae0dec9a376210f0f0fd1d70a67da934ffaa Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/599180 Reviewed-by: Damien Neil <dneil@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>	2024-07-19 16:06:05 +00:00
..
err.json	…
ok.json	…

Tatiana Bradley ebcb244a81 cmd/vulnreport: check if packages exist in vulnreport fix

Add a simple check for package existence in vulnreport fix, which
pings pkg.go.dev to determine if a package exists.

This is more likely to succeed (and faster) than the package/symbol
check which downloads the whole package. We now skip this symbol-check
when there are no symbols listed.

There are still some cases in which this fails incorrectly (e.g. if pkgsite
for some reason couldn't cache the given package/version), so the check
can be bypassed.

Change-Id: I922eae0dec9a376210f0f0fd1d70a67da934ffaa
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/599180
Reviewed-by: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>

2024-07-19 16:06:05 +00:00

err.json

…

ok.json

…