mirror of
https://github.com/anchore/syft.git
synced 2026-11-02 15:36:41 +01:00
Yashas Gunderiaandychampion
289137ff3c
* Prevent duplicate Go packages after source replacement resolution Source analysis already applies module replacements through go/packages. Avoid synthesizing the same replacement again from go.mod while retaining fallback synthesis for modules that source analysis did not resolve. Constraint: Preserve unimported and local-path replacement cataloging. Rejected: Deduplicate only during final assembly | That retains redundant license lookup and ambiguous metadata ownership. Confidence: high Scope-risk: narrow Directive: Keep go.mod fallback packages limited to modules absent from source analysis. Tested: Focused replacement regression, related Go module parser tests, go vet, gofmt, and diff checks. Not-tested: Docker-backed full cataloger fixtures; local root storage was exhausted by image generation. Signed-off-by: ychampion <ychampion@users.noreply.github.com> * Keep replacement fixtures with the Go module test data Constraint: The maintainer reserves internal/gotestdata for fixtures that need special Go tooling discovery. Rejected: Leave this fixture in gotestdata | The regression opens its module explicitly and does not need the special location. Confidence: high Scope-risk: narrow Directive: Use internal/gotestdata only when a fixture must avoid Go testdata discovery rules. Tested: replacement regression repeated 10 times; Go module parser table; go vet for the Go cataloger; gofmt; diff checks. Not-tested: Full cataloger package; three unrelated parser fixtures fail identically on exact prior head in this environment. Signed-off-by: ychampion <ychampion@users.noreply.github.com> --------- Signed-off-by: ychampion <ychampion@users.noreply.github.com> Co-authored-by: ychampion <ychampion@users.noreply.github.com>
7 lines
499 B
Plaintext
7 lines
499 B
Plaintext
golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c h1:qgOY6WgZOaTkIIMiVjBQcw93ERBE4m30iBm00nkL0i8=
|
|
golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
|
|
rsc.io/quote v1.5.2 h1:w5fcysjrx7yqtD/aO+QwRjYZOKnaM9Uh2b40tElTs3Y=
|
|
rsc.io/quote v1.5.2/go.mod h1:LzX7hefJvL54yjefDEDHNONDjII0t9xZLPXsUe+TKr0=
|
|
rsc.io/sampler v1.3.1 h1:F0c3J2nQCdk9ODsNhU3sElnvPIxM/xV1c/qZuAeZmac=
|
|
rsc.io/sampler v1.3.1/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
|