Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(check-plugin): format output for indirect dependencies #28

Merged
merged 2 commits into from
Jul 15, 2024

Conversation

stevenh
Copy link
Contributor

@stevenh stevenh commented Jul 9, 2024

Fix the output of go mod directives from check-plugin command when operating with --format / -f flag.

This now output go mod edit --replace directives for indirect dependencies which ensures that the versions are correctly pinned.

Previously "fixes" were lost when go mod tidy was run.

Fixes #27

@stevenh stevenh force-pushed the feat/indirect-packages branch from 80a9e1d to 39986b6 Compare July 10, 2024 06:49
Fix the output of go mod directives from check-plugin command when
operating with --format / -f flag.

This now output go mod edit --replace directives for indirect
dependencies which ensures that the versions are correctly pinned.

Previously "fixes" were lost when go mod tidy was run.

Fixes krakend#27
@stevenh stevenh force-pushed the feat/indirect-packages branch from 39986b6 to e7565ae Compare July 10, 2024 06:58
@stevenh
Copy link
Contributor Author

stevenh commented Jul 10, 2024

The failure here is a false positive in the DeepSource tool as reported here:
https://discuss.deepsource.com/t/go-s2307-false-positives/527/6

Apply a workaround for the false positive for GO-S2307.
@stevenh
Copy link
Contributor Author

stevenh commented Jul 10, 2024

Have added a workaround for the DeepSource false positive

@kpacha kpacha merged commit 220d6bb into krakend:master Jul 15, 2024
2 checks passed
@kpacha
Copy link
Member

kpacha commented Jul 15, 2024

@stevenh thanks for the contribution!!!

@stevenh stevenh deleted the feat/indirect-packages branch July 15, 2024 22:42
@stevenh
Copy link
Contributor Author

stevenh commented Jul 15, 2024

Thanks for merging @kpacha follow up PR #29 to add automatic fixing is now ready to for review 😃

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

check-plugin fix fails for indirect dependencies
2 participants