Luan Taraschi ab508169e6 fix(golang): skip remote license lookup for standard library module paths (#5192) ...

With search-remote-licenses enabled, every module name went to the proxy,
including toolchain binaries whose main module is synthesized from the
package path, such as cmd/cgo. The proxy answers 404, and the direct
fallback then treats the path as a repository host, producing requests
like https://cmd/cgo/info/refs?service=git-upload-pack.

Reuse isStandardImportPath, already in this package, to skip the remote
search for paths whose first element carries no dot. Those are never
publishable module paths, so neither a proxy nor a repository can resolve
them.

Fixes #3149

Signed-off-by: Luan Taraschi <130802253+luantaraschi@users.noreply.github.com>

2026-08-19 10:11:10 -04:00

..

internal

chore: migrate fixtures to testdata (#4651)

2026-03-06 19:42:04 +00:00

testdata

Avoid duplicate packages for replaced Go modules (#5069)

2026-07-20 12:30:56 -04:00

billy_adapter_test.go

chore: migrate fixtures to testdata (#4651)

2026-03-06 19:42:04 +00:00

billy_adapter.go

feat: Support scanning license files in golang packages over the network (#1630)

2023-04-14 15:13:29 -04:00

capabilities.yaml

feat(golang): add extended-stdlib scope and module patterns for symbol capture (#5154)

2026-08-07 12:44:42 +00:00

cataloger_test.go

chore: migrate fixtures to testdata (#4651)

2026-03-06 19:42:04 +00:00

cataloger.go

feat: optionally capture golang binary symbols (#4988)

2026-07-13 10:30:23 -04:00

config_test.go

feat: optionally capture golang binary symbols (#4988)

2026-07-13 10:30:23 -04:00

config.go

feat(golang): add extended-stdlib scope and module patterns for symbol capture (#5154)

2026-08-07 12:44:42 +00:00

license_finder_test.go

feat: license file search (#4327)

2025-11-03 14:16:05 -05:00

license_finder.go

feat: license file search (#4327)

2025-11-03 14:16:05 -05:00

licenses_test.go

fix(golang): skip remote license lookup for standard library module paths (#5192)

2026-08-19 10:11:10 -04:00

licenses.go

fix(golang): skip remote license lookup for standard library module paths (#5192)

2026-08-19 10:11:10 -04:00

package_test.go

fix: golang PURL should include full module (#4395)

2025-12-12 14:19:26 -05:00

package.go

perf: group golang symbols by package path to reduce the sbom size (#5064)

2026-07-13 16:40:16 -04:00

parse_go_binary_test.go

feat(golang): add extended-stdlib scope and module patterns for symbol capture (#5154)

2026-08-07 12:44:42 +00:00

parse_go_binary.go

Prevent unnecessary allocations when parsing compressed ELF sections (#5187)

2026-08-14 20:08:58 +00:00

parse_go_mod_replace_test.go

Avoid duplicate packages for replaced Go modules (#5069)

2026-07-20 12:30:56 -04:00

parse_go_mod_test.go

chore: migrate fixtures to testdata (#4651)

2026-03-06 19:42:04 +00:00

parse_go_mod.go

Avoid duplicate packages for replaced Go modules (#5069)

2026-07-20 12:30:56 -04:00

scan_binary_bomb_test.go

Prevent unnecessary allocations when parsing compressed ELF sections (#5187)

2026-08-14 20:08:58 +00:00

scan_binary_test.go

feat(golang): detect native Go FIPS 140 mode in binaries (#5155)

2026-08-07 14:36:09 +00:00

scan_binary.go

Prevent unnecessary allocations when parsing compressed ELF sections (#5187)

2026-08-14 20:08:58 +00:00

stdlib_package_test.go

feat: add safe tensor model type to SBOM output (#4844)

2026-07-15 17:14:03 -04:00

stdlib_package.go

perf: group golang symbols by package path to reduce the sbom size (#5064)

2026-07-13 16:40:16 -04:00

subfs_test.go

chore: migrate fixtures to testdata (#4651)

2026-03-06 19:42:04 +00:00

subfs.go

feat: Support scanning license files in golang packages over the network (#1630)

2023-04-14 15:13:29 -04:00

symbol_selector_test.go

feat(golang): add extended-stdlib scope and module patterns for symbol capture (#5154)

2026-08-07 12:44:42 +00:00

symbol_selector.go

feat(golang): add extended-stdlib scope and module patterns for symbol capture (#5154)

2026-08-07 12:44:42 +00:00

symbols_test.go

fix: consider vendored golang packages in module attribution (#5093)

2026-07-27 15:20:49 -04:00

symbols.go

Prevent unnecessary allocations when parsing compressed ELF sections (#5187)

2026-08-14 20:08:58 +00:00

upx_test.go

Decompress UPX packed binaries to extract golang build info (ELF formatted binaries with lzma method only) (#4480)

2025-12-22 14:17:38 +00:00

upx.go

chore(deps): update Go version (#4798)

2026-04-20 10:03:15 -04:00