mrhid6/vantage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 22 Wiki Activity

fix: tidy server go.mod for the vulnerability database dependencies
Chart Release / chart (push) Successful in 12s
Details
Server Deploy / deploy (push) Canceled after 2m11s
Details

Browse Source 
trivy-db, oras-go, the three version comparators and robfig/cron were
recorded as indirect with an incomplete go.sum, which builds locally
against a warm module cache but fails in CI with "updates to go.mod
needed". trivy-db pulls testify into the build graph, and its hashes
were missing entirely.
This commit is contained in:
mrhid6
2026-08-06 15:18:57 +01:00
parent 9df89e2db4
commit eee236a072
2 changed files with 41 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/go.mod
+17 -7
View File
@@ -3,27 +3,37 @@ module gitea.hostxtra.co.uk/mrhid6/vantage/server
go 1.26
require (
github.com/aquasecurity/trivy-db v0.0.0-20260713131703-4be526083c54
github.com/coreos/go-oidc/v3 v3.18.0
github.com/gin-gonic/gin v1.10.0
github.com/google/uuid v1.6.0
github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f
github.com/knqyf263/go-deb-version v0.0.0-20241115132648-6f4aee6ccd23
github.com/knqyf263/go-rpm-version v0.0.0-20240918084003-2afd7dc6a38f
github.com/opencontainers/image-spec v1.1.1
github.com/redis/go-redis/v9 v9.20.1
github.com/robfig/cron/v3 v3.0.1
github.com/wwt/guac v1.3.2
go.mongodb.org/mongo-driver/v2 v2.8.0
golang.org/x/crypto v0.54.0
golang.org/x/oauth2 v0.36.0
google.golang.org/grpc v1.64.0
oras.land/oras-go/v2 v2.6.2
)
require (
github.com/aquasecurity/trivy-db v0.0.0-20260713131703-4be526083c54 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/hyperboloide/lk v0.0.0-20251220053519-b291812e3216 // indirect
github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f // indirect
github.com/knqyf263/go-deb-version v0.0.0-20241115132648-6f4aee6ccd23 // indirect
github.com/knqyf263/go-rpm-version v0.0.0-20240918084003-2afd7dc6a38f // indirect
github.com/oklog/ulid/v2 v2.1.1 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/robfig/cron/v3 v3.0.1 // indirect
oras.land/oras-go/v2 v2.6.2 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/samber/lo v1.50.0 // indirect
github.com/samber/oops v1.18.1 // indirect
github.com/stretchr/objx v0.5.2 // indirect
github.com/stretchr/testify v1.11.1 // indirect
go.etcd.io/bbolt v1.4.3 // indirect
go.opentelemetry.io/otel v1.34.0 // indirect
go.opentelemetry.io/otel/trace v1.34.0 // indirect
)
require (