feat(report): add support for Cosign vulnerability attestation #2567
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -28,7 +28,7 @@ require ( | |
| github.com/go-redis/redis/v8 v8.11.5 | ||
| github.com/golang-jwt/jwt v3.2.2+incompatible | ||
| github.com/golang/protobuf v1.5.2 | ||
| github.com/google/go-containerregistry v0.8.1-0.20220209165246-a44adc326839 | ||
| github.com/google/licenseclassifier/v2 v2.0.0-pre5 | ||
| github.com/google/uuid v1.3.0 | ||
| github.com/google/wire v0.5.0 | ||
|
|
@@ -49,7 +49,7 @@ require ( | |
| github.com/sosedoff/gitkit v0.3.0 | ||
| github.com/spf13/cobra v1.5.0 | ||
| github.com/spf13/pflag v1.0.5 | ||
| github.com/spf13/viper v1.12.0 | ||
|
There was a problem hiding this comment. same |
||
| github.com/stretchr/testify v1.8.0 | ||
| github.com/testcontainers/testcontainers-go v0.13.0 | ||
| github.com/tetratelabs/wazero v0.0.0-20220701105919-891761ac1ee2 | ||
|
|
@@ -66,11 +66,18 @@ require ( | |
|
|
||
| require github.com/emicklei/go-restful/v3 v3.8.0 // indirect | ||
|
|
||
| require ( | ||
| github.com/go-playground/universal-translator v0.18.0 // indirect | ||
| github.com/googleapis/go-type-adapters v1.0.0 // indirect | ||
| github.com/leodido/go-urn v1.2.1 // indirect | ||
| github.com/pelletier/go-toml/v2 v2.0.1 // indirect | ||
| ) | ||
|
|
||
| require ( | ||
| cloud.google.com/go v0.100.2 // indirect | ||
| cloud.google.com/go/compute v1.6.1 // indirect | ||
| cloud.google.com/go/iam v0.3.0 // indirect | ||
| cloud.google.com/go/storage v1.22.1 // indirect | ||
| github.com/Azure/azure-sdk-for-go v66.0.0+incompatible | ||
| github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect | ||
| github.com/Azure/go-autorest v14.2.0+incompatible // indirect | ||
|
|
@@ -103,7 +110,7 @@ require ( | |
| github.com/apparentlymart/go-cidr v1.1.0 // indirect | ||
| github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect | ||
| github.com/aquasecurity/defsec v0.68.10 | ||
| github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect | ||
| github.com/aws/aws-sdk-go v1.44.46 | ||
| github.com/beorn7/perks v1.0.1 // indirect | ||
| github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect | ||
|
|
@@ -143,14 +150,14 @@ require ( | |
| github.com/go-gorp/gorp/v3 v3.0.2 // indirect | ||
| github.com/go-logr/logr v1.2.3 // indirect | ||
| github.com/go-openapi/jsonpointer v0.19.5 // indirect | ||
| github.com/go-openapi/jsonreference v0.19.6 // indirect | ||
| github.com/go-openapi/swag v0.21.1 // indirect | ||
| github.com/gobwas/glob v0.2.3 // indirect | ||
| github.com/goccy/go-yaml v1.8.2 // indirect | ||
| github.com/gofrs/uuid v4.0.0+incompatible // indirect | ||
| github.com/gogo/googleapis v1.4.1 // indirect | ||
| github.com/gogo/protobuf v1.3.2 // indirect | ||
| github.com/golang-jwt/jwt/v4 v4.3.0 // indirect | ||
| github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect | ||
| github.com/google/btree v1.0.1 // indirect | ||
| github.com/google/gnostic v0.5.7-v3refs // indirect | ||
|
|
@@ -160,14 +167,14 @@ require ( | |
| github.com/googleapis/gax-go/v2 v2.4.0 // indirect | ||
| github.com/gorilla/mux v1.8.0 // indirect | ||
| github.com/gosuri/uitable v0.0.4 // indirect | ||
| github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect | ||
| github.com/hashicorp/errwrap v1.1.0 // indirect | ||
| github.com/hashicorp/go-cleanhttp v0.5.2 // indirect | ||
| github.com/hashicorp/go-multierror v1.1.1 | ||
| github.com/hashicorp/go-retryablehttp v0.7.1 // indirect | ||
| github.com/hashicorp/go-safetemp v1.0.0 // indirect | ||
| github.com/hashicorp/go-uuid v1.0.3 // indirect | ||
| github.com/hashicorp/go-version v1.5.0 // indirect | ||
| github.com/hashicorp/hcl v1.0.0 // indirect | ||
| github.com/hashicorp/hcl/v2 v2.12.0 // indirect | ||
| github.com/hhatto/gorst v0.0.0-20181029133204-ca9f730cac5b // indirect | ||
|
|
@@ -198,7 +205,7 @@ require ( | |
| github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect | ||
| github.com/mitchellh/copystructure v1.2.0 // indirect | ||
| github.com/mitchellh/go-homedir v1.1.0 // indirect | ||
| github.com/mitchellh/go-testing-interface v1.14.1 // indirect | ||
| github.com/mitchellh/go-wordwrap v1.0.1 // indirect | ||
| github.com/mitchellh/mapstructure v1.5.0 // indirect | ||
| github.com/mitchellh/reflectwalk v1.0.2 // indirect | ||
|
|
@@ -230,7 +237,7 @@ require ( | |
| github.com/prometheus/client_model v0.2.0 // indirect | ||
| github.com/prometheus/common v0.32.1 // indirect | ||
| github.com/prometheus/procfs v0.7.3 // indirect | ||
| github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect | ||
| github.com/remyoudompheng/bigfft v0.0.0-20200410134404-eec4a21b6bb0 // indirect | ||
| github.com/rivo/uniseg v0.2.0 // indirect | ||
| github.com/rubenv/sql-migrate v1.1.1 // indirect | ||
|
|
@@ -260,18 +267,18 @@ require ( | |
| github.com/zclconf/go-cty-yaml v1.0.2 // indirect | ||
| go.opencensus.io v0.23.0 // indirect | ||
| go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 // indirect | ||
| go.uber.org/atomic v1.9.0 // indirect | ||
| go.uber.org/multierr v1.7.0 // indirect | ||
| golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e | ||
| golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3 | ||
| golang.org/x/net v0.0.0-20220624214902-1bab6f366d9e // indirect | ||
| golang.org/x/oauth2 v0.0.0-20220411215720-9780585627b5 // indirect | ||
| golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f | ||
| golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 // indirect | ||
| golang.org/x/term v0.0.0-20220526004731-065cf7ba2467 // indirect | ||
| golang.org/x/text v0.3.7 | ||
| golang.org/x/time v0.0.0-20220411224347-583f2d630306 // indirect | ||
| golang.org/x/tools v0.1.10 // indirect | ||
| gonum.org/v1/gonum v0.7.0 // indirect | ||
| google.golang.org/api v0.81.0 // indirect | ||
| google.golang.org/appengine v1.6.7 // indirect | ||
|
|
||
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we need to bump the version?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No, we don't.
I updated go.mod unintentionally. I checked again, and go.mod needs no modifications.