Skip to content

v1.0.2

Choose a tag to compare

@zpavlinovic zpavlinovic released this 20 Mar 18:33
· 177 commits to master since this release

This release brings minor improvements to the govulncheck textual output and fixes for error messages (#59623, #64681), fixed version suggestion (#62276), documentation (e.g., #60166), and issues in dependencies (e.g., #64112).

Support for analyzing stripped darwin binaries in govulncheck is added as well (#61051).

Integration

govulncheck (streaming) JSON now emits an OSV message for each vulnerability associated with user modules and its transitive dependencies, regardless of the module version.

As usual, govulncheck emits a module-level Finding if a vulnerability for a module applies to the current module version.