STRLCPY/scorecard

🐛 Updates osv-scanner dependency to 1.2.0. (#2704)

* Updates osv-scanner dependency to 1.2.0.

The 1.0 release changed the return value for osv-scanner to output an error
when vulnerabilities are found, modified to handle this error correctly.

Signed-off-by: Rex Pan <[email protected]>

* Add some additional comments

Signed-off-by: Rex Pan <[email protected]>

* Update osv-scanner to include SBOM and logging fixes

Signed-off-by: Rex Pan <[email protected]>

---------

Signed-off-by: Rex Pan <[email protected]>

Rex P committed with GitHub 1 year ago

170af756

1 parent 5f13a66c

Total 3 files Show one by one

■ ■ ■ ■ ■ ■

clients/osv.go

		skipped 15 lines
16	16
17	17		import (
18	18		"context"
	19	+	"errors"
19	20		"fmt"
20	21
21	22		"github.com/google/osv-scanner/pkg/osvscanner"
		skipped 23 lines
45	46		Recursive: true,
46	47		GitCommits: gitCommits,
47	48		}, nil) // TODO: Do logging?
48		-	if err != nil {
49		-	return VulnerabilitiesResponse{}, fmt.Errorf("osvscanner.DoScan: %w", err)
50		-	}
51	49
52	50		response := VulnerabilitiesResponse{}
53		-	vulns := res.Flatten()
54		-	for i := range vulns {
55		-	response.Vulnerabilities = append(response.Vulnerabilities, Vulnerability{
56		-	ID: vulns[i].Vulnerability.ID,
57		-	Aliases: vulns[i].Vulnerability.Aliases,
58		-	})
59		-	// Remove duplicate vulnerability IDs for now as we don't report information
60		-	// on the source of each vulnerability yet, therefore having multiple identical
61		-	// vuln IDs might be confusing.
62		-	response.Vulnerabilities = removeDuplicate(
63		-	response.Vulnerabilities,
64		-	func(key Vulnerability) string { return key.ID },
65		-	)
	51	+
	52	+	if err == nil { // No vulns found
	53	+	return response, nil
66	54		}
67		-	return response, nil
	55	+
	56	+	// If vulnerabilities are found, err will be set to osvscanner.VulnerabilitiesFoundErr
	57	+	if errors.Is(err, osvscanner.VulnerabilitiesFoundErr) {
	58	+	vulns := res.Flatten()
	59	+	for i := range vulns {
	60	+	response.Vulnerabilities = append(response.Vulnerabilities, Vulnerability{
	61	+	ID: vulns[i].Vulnerability.ID,
	62	+	Aliases: vulns[i].Vulnerability.Aliases,
	63	+	})
	64	+	// Remove duplicate vulnerability IDs for now as we don't report information
	65	+	// on the source of each vulnerability yet, therefore having multiple identical
	66	+	// vuln IDs might be confusing.
	67	+	response.Vulnerabilities = removeDuplicate(
	68	+	response.Vulnerabilities,
	69	+	func(key Vulnerability) string { return key.ID },
	70	+	)
	71	+	}
	72	+
	73	+	return response, nil
	74	+	}
	75	+
	76	+	return VulnerabilitiesResponse{}, fmt.Errorf("osvscanner.DoScan: %w", err)
68	77		}
69	78
70	79		// RemoveDuplicate removes duplicate entries from a slice.
		skipped 13 lines

■ ■ ■ ■ ■ ■

go.mod

		skipped 34 lines
35	35		go.opencensus.io v0.24.0
36	36		gocloud.dev v0.26.0
37	37		golang.org/x/text v0.7.0
38		-	golang.org/x/tools v0.5.0
	38	+	golang.org/x/tools v0.5.1-0.20230117180257-8aba49bb5ea2
39	39		google.golang.org/genproto v0.0.0-20221118155620-16455021b5e6
40	40		google.golang.org/protobuf v1.28.1
41	41		gopkg.in/yaml.v2 v2.4.0
		skipped 5 lines
47	47		github.com/Masterminds/semver/v3 v3.2.0
48	48		github.com/caarlos0/env/v6 v6.10.0
49	49		github.com/gobwas/glob v0.2.3
50		-	github.com/google/osv-scanner v0.0.0-20221212045131-8aef1778b823
	50	+	github.com/google/osv-scanner v1.2.1-0.20230302232134-592acbc2539b
51	51		github.com/mcuadros/go-jsonschema-generator v0.0.0-20200330054847-ba7a369d4303
52	52		github.com/onsi/ginkgo/v2 v2.7.0
53	53		sigs.k8s.io/release-utils v0.6.0
		skipped 9 lines
63	63		github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
64	64		github.com/Azure/go-autorest/logger v0.2.1 // indirect
65	65		github.com/Azure/go-autorest/tracing v0.6.0 // indirect
66		-	github.com/BurntSushi/toml v1.2.0 // indirect
	66	+	github.com/BurntSushi/toml v1.2.1 // indirect
67	67		github.com/CycloneDX/cyclonedx-go v0.7.0 // indirect
68	68		github.com/cloudflare/circl v1.1.0 // indirect
69	69		github.com/davecgh/go-spew v1.1.1 // indirect
		skipped 3 lines
73	73		github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
74	74		github.com/hashicorp/go-retryablehttp v0.7.1 // indirect
75	75		github.com/hashicorp/golang-lru v0.5.3 // indirect
76		-	github.com/jedib0t/go-pretty/v6 v6.4.0 // indirect
	76	+	github.com/jedib0t/go-pretty/v6 v6.4.4 // indirect
77	77		github.com/json-iterator/go v1.1.12 // indirect
78	78		github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
79	79		github.com/modern-go/reflect2 v1.0.2 // indirect
80	80		github.com/package-url/packageurl-go v0.1.0 // indirect
81	81		github.com/pjbgf/sha1cd v0.2.3 // indirect
82	82		github.com/skeema/knownhosts v1.1.0 // indirect
83		-	github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb // indirect
84		-	github.com/spdx/tools-golang v0.3.0 // indirect
85		-	golang.org/x/mod v0.7.0 // indirect
	83	+	github.com/spdx/gordf v0.0.0-20221230105357-b735bd5aac89 // indirect
	84	+	github.com/spdx/tools-golang v0.4.0 // indirect
	85	+	golang.org/x/mod v0.8.0 // indirect
86	86		golang.org/x/term v0.5.0 // indirect
87	87		golang.org/x/time v0.3.0 // indirect
	88	+	golang.org/x/vuln v0.0.0-20230118164824-4ec8867cc0e6 // indirect
88	89		gopkg.in/inf.v0 v0.9.1 // indirect
89	90		k8s.io/api v0.20.0 // indirect
90	91		k8s.io/apimachinery v0.20.0 // indirect
		skipped 1 lines
92	93		k8s.io/klog/v2 v2.80.1 // indirect
93	94		k8s.io/utils v0.0.0-20211116205334-6203023598ed // indirect
94	95		sigs.k8s.io/structured-merge-diff/v4 v4.0.2 // indirect
95		-	sigs.k8s.io/yaml v1.2.0 // indirect
	96	+	sigs.k8s.io/yaml v1.3.0 // indirect
96	97		)
97	98
98	99		require (
		skipped 16 lines
115	116		github.com/emirpasic/gods v1.18.1 // indirect
116	117		github.com/fatih/color v1.13.0 // indirect
117	118		github.com/go-git/gcfg v1.5.0 // indirect
118		-	github.com/go-git/go-billy/v5 v5.4.0 // indirect
	119	+	github.com/go-git/go-billy/v5 v5.4.1 // indirect
119	120		github.com/gogo/protobuf v1.3.2 // indirect
120	121		github.com/golang-jwt/jwt/v4 v4.4.1 // indirect
121	122		github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
		skipped 28 lines
150	151		github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
151	152		github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
152	153		golang.org/x/crypto v0.3.0 // indirect
153		-	golang.org/x/exp v0.0.0-20221031165847-c99f073a8326
	154	+	golang.org/x/exp v0.0.0-20230224173230-c95f2b4c22f2
154	155		golang.org/x/net v0.7.0 // indirect
155	156		golang.org/x/oauth2 v0.3.0 // indirect
156	157		golang.org/x/sync v0.1.0 // indirect
		skipped 30 lines

■ ■ ■ ■ ■ ■

go.sum

		skipped 156 lines
157	157		github.com/Azure/go-autorest/tracing v0.6.0 h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo=
158	158		github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBpUA79WCAKPPZVC2DeU=
159	159		github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
160		-	github.com/BurntSushi/toml v1.2.0 h1:Rt8g24XnyGTyglgET/PRUNlrUeu9F5L+7FilkXfZgs0=
161		-	github.com/BurntSushi/toml v1.2.0/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
	160	+	github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak=
	161	+	github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
162	162		github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
163	163		github.com/CycloneDX/cyclonedx-go v0.7.0 h1:jNxp8hL7UpcvPDFXjY+Y1ibFtsW+e5zyF9QoSmhK/zg=
164	164		github.com/CycloneDX/cyclonedx-go v0.7.0/go.mod h1:W5Z9w8pTTL+t+yG3PCiFRGlr8PUlE0pGWzKSJbsyXkg=
		skipped 95 lines
260	260		github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
261	261		github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
262	262		github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
	263	+	github.com/client9/misspell v0.3.4 h1:ta993UF76GwbvJcIo3Y68y/M3WxlpEHPWIGDkJYwzJI=
263	264		github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
264	265		github.com/cloudflare/circl v1.1.0 h1:bZgT/A+cikZnKIwn7xL2OBj012Bmvho/o6RpRvv3GKY=
265	266		github.com/cloudflare/circl v1.1.0/go.mod h1:prBCrKB9DV4poKZY1l9zBXg2QJY7mvgRvtMxxK7fi4I=
		skipped 97 lines
363	364		github.com/go-git/gcfg v1.5.0 h1:Q5ViNfGF8zFgyJWPqYwA7qGFoMTEiBmdlkcfRmpIMa4=
364	365		github.com/go-git/gcfg v1.5.0/go.mod h1:5m20vg6GwYabIxaOonVkTdrILxQMpEShl1xiMF4ua+E=
365	366		github.com/go-git/go-billy/v5 v5.3.1/go.mod h1:pmpqyWchKfYfrkb/UVH4otLvyi/5gJlGI4Hb3ZqZ3W0=
366		-	github.com/go-git/go-billy/v5 v5.4.0 h1:Vaw7LaSTRJOUric7pe4vnzBSgyuf2KrLsu2Y4ZpQBDE=
367	367		github.com/go-git/go-billy/v5 v5.4.0/go.mod h1:vjbugF6Fz7JIflbVpl1hJsGjSHNltrSw45YK/ukIvQg=
	368	+	github.com/go-git/go-billy/v5 v5.4.1 h1:Uwp5tDRkPr+l/TnbHOQzp+tmJfLceOlbVucgpTz8ix4=
	369	+	github.com/go-git/go-billy/v5 v5.4.1/go.mod h1:vjbugF6Fz7JIflbVpl1hJsGjSHNltrSw45YK/ukIvQg=
368	370		github.com/go-git/go-git-fixtures/v4 v4.3.1 h1:y5z6dd3qi8Hl+stezc8p3JxDkoTRqMAlKnXHuzrfjTQ=
369	371		github.com/go-git/go-git-fixtures/v4 v4.3.1/go.mod h1:8LHG1a3SRW71ettAD/jW13h8c6AqjVSeL11RAdgaqpo=
370	372		github.com/go-git/go-git/v5 v5.5.2 h1:v8lgZa5k9ylUw+OR/roJHTxR4QItsNFI5nKtAXFuynw=
		skipped 134 lines
505	507		github.com/google/martian/v3 v3.2.1/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3+6W4l/CUk=
506	508		github.com/google/martian/v3 v3.3.2 h1:IqNFLAmvJOgVlpdEBiQbDc2EwKW77amAycfTuWKdfvw=
507	509		github.com/google/martian/v3 v3.3.2/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3+6W4l/CUk=
508		-	github.com/google/osv-scanner v0.0.0-20221212045131-8aef1778b823 h1:gmZSgbjnj2XPX2jz1VY8QAUFqiHrYJDajG72CODinuc=
509		-	github.com/google/osv-scanner v0.0.0-20221212045131-8aef1778b823/go.mod h1:/pyEWUK+MMC8/CxgHmZNjtCq0pts7KYc6bXJEA9UPNE=
	510	+	github.com/google/osv-scanner v1.2.1-0.20230302232134-592acbc2539b h1:i51oNIa4JdwBAKDnZjvxGq9jOHKZ3OPZtLrTz8aHaAA=
	511	+	github.com/google/osv-scanner v1.2.1-0.20230302232134-592acbc2539b/go.mod h1:bzlupbn+xUEuPbu4cuCN4HlpD2eMPmMNj8Qqwu8s9vM=
510	512		github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
511	513		github.com/google/pprof v0.0.0-20190515194954-54271f7e092f/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
512	514		github.com/google/pprof v0.0.0-20191218002539-d4f498aebedc/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
		skipped 130 lines
643	645		github.com/jackc/puddle v1.2.1/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
644	646		github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
645	647		github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
646		-	github.com/jedib0t/go-pretty/v6 v6.4.0 h1:YlI/2zYDrweA4MThiYMKtGRfT+2qZOO65ulej8GTcVI=
647		-	github.com/jedib0t/go-pretty/v6 v6.4.0/go.mod h1:MgmISkTWDSFu0xOqiZ0mKNntMQ2mDgOcwOkwBEkMDJI=
	648	+	github.com/jedib0t/go-pretty/v6 v6.4.4 h1:N+gz6UngBPF4M288kiMURPHELDMIhF/Em35aYuKrsSc=
	649	+	github.com/jedib0t/go-pretty/v6 v6.4.4/go.mod h1:MgmISkTWDSFu0xOqiZ0mKNntMQ2mDgOcwOkwBEkMDJI=
648	650		github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
649	651		github.com/jessevdk/go-flags v1.5.0/go.mod h1:Fw0T6WPc1dYxT4mKEZRfG5kJhaTDP9pj1c2EWnYs/m4=
650	652		github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
		skipped 217 lines
868	870		github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
869	871		github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
870	872		github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
871		-	github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb h1:bLo8hvc8XFm9J47r690TUKBzcjSWdJDxmjXJZ+/f92U=
872	873		github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb/go.mod h1:uKWaldnbMnjsSAXRurWqqrdyZen1R7kxl8TkmWk2OyM=
873		-	github.com/spdx/tools-golang v0.3.0 h1:rtm+DHk3aAt74Fh0Wgucb4pCxjXV8SqHCPEb2iBd30k=
874		-	github.com/spdx/tools-golang v0.3.0/go.mod h1:RO4Y3IFROJnz+43JKm1YOrbtgQNljW4gAPpA/sY2eqo=
	874	+	github.com/spdx/gordf v0.0.0-20221230105357-b735bd5aac89 h1:dArkMwZ7Mf2JiU8OfdmqIv8QaHT4oyifLIe1UhsF1SY=
	875	+	github.com/spdx/gordf v0.0.0-20221230105357-b735bd5aac89/go.mod h1:uKWaldnbMnjsSAXRurWqqrdyZen1R7kxl8TkmWk2OyM=
	876	+	github.com/spdx/tools-golang v0.4.0 h1:jdhnW8zYelURCbYTphiviFKZkWu51in0E4A1KT2csP0=
	877	+	github.com/spdx/tools-golang v0.4.0/go.mod h1:VHzvNsKAfAGqs4ZvwRL+7a0dNsL20s7lGui4K9C0xQM=
875	878		github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
876	879		github.com/spf13/afero v1.2.2/go.mod h1:9ZxEEn6pIJ8Rxe320qSDBk6AsU0r9pR7Q4OcevTdifk=
877	880		github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
		skipped 132 lines
1010	1013		golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
1011	1014		golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM=
1012	1015		golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU=
1013		-	golang.org/x/exp v0.0.0-20221031165847-c99f073a8326 h1:QfTh0HpN6hlw6D3vu8DAwC8pBIwikq0AI1evdm+FksE=
1014		-	golang.org/x/exp v0.0.0-20221031165847-c99f073a8326/go.mod h1:CxIveKay+FTh1D0yPZemJVgC/95VzuuOLq5Qi4xnoYc=
	1016	+	golang.org/x/exp v0.0.0-20230224173230-c95f2b4c22f2 h1:Jvc7gsqn21cJHCmAWx0LiimpP18LZmUxkT5Mp7EZ1mI=
	1017	+	golang.org/x/exp v0.0.0-20230224173230-c95f2b4c22f2/go.mod h1:CxIveKay+FTh1D0yPZemJVgC/95VzuuOLq5Qi4xnoYc=
1015	1018		golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
1016	1019		golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
1017	1020		golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
		skipped 21 lines
1039	1042		golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
1040	1043		golang.org/x/mod v0.5.0/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro=
1041	1044		golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
1042		-	golang.org/x/mod v0.7.0 h1:LapD9S96VoQRhi/GrNTqeBJFrUjs5UHCAtTlgwA5oZA=
1043		-	golang.org/x/mod v0.7.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
	1045	+	golang.org/x/mod v0.8.0 h1:LUYupSeNrTNCGzR/hVBk2NHZO4hXcVaW1k4Qx7rjPx8=
	1046	+	golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
1044	1047		golang.org/x/net v0.0.0-20170114055629-f2499483f923/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
1045	1048		golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
1046	1049		golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
		skipped 294 lines
1341	1344		golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
1342	1345		golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
1343	1346		golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
1344		-	golang.org/x/tools v0.5.0 h1:+bSpV5HIeWkuvgaMfI3UmKRThoTA5ODJTUd8T17NO+4=
1345		-	golang.org/x/tools v0.5.0/go.mod h1:N+Kgy78s5I24c24dU8OfWNEotWjutIs8SnJvn5IDq+k=
	1347	+	golang.org/x/tools v0.5.1-0.20230117180257-8aba49bb5ea2 h1:v0FhRDmSCNH/0EurAT6T8KRY4aNuUhz6/WwBMxG+gvQ=
	1348	+	golang.org/x/tools v0.5.1-0.20230117180257-8aba49bb5ea2/go.mod h1:N+Kgy78s5I24c24dU8OfWNEotWjutIs8SnJvn5IDq+k=
	1349	+	golang.org/x/vuln v0.0.0-20230118164824-4ec8867cc0e6 h1:XZD8apnMaMVuqE3ZEzf5JJncKMlOsMnnov7U+JRT/d4=
	1350	+	golang.org/x/vuln v0.0.0-20230118164824-4ec8867cc0e6/go.mod h1:cBP4HMKv0X+x96j8IJWCKk0eqpakBmmHjKGSSC0NaYE=
1346	1351		golang.org/x/xerrors v0.0.0-20190410155217-1f06c39b4373/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
1347	1352		golang.org/x/xerrors v0.0.0-20190513163551-3ee3066db522/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
1348	1353		golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
		skipped 241 lines
1590	1595		honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
1591	1596		honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
1592	1597		honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
	1598	+	honnef.co/go/tools v0.2.2 h1:MNh1AVMyVX23VUHE2O27jm6lNj3vjO5DexS4A1xvnzk=
1593	1599		k8s.io/api v0.18.8/go.mod h1:d/CXqwWv+Z2XEG1LgceeDmHQwpUJhROPx16SlxJgERY=
1594	1600		k8s.io/api v0.20.0 h1:WwrYoZNM1W1aQEbyl8HNG+oWGzLpZQBlcerS9BQw9yI=
1595	1601		k8s.io/api v0.20.0/go.mod h1:HyLC5l5eoS/ygQYl1BXBgFzWNlkHiAuyNAbevIn+FKg=
		skipped 35 lines
1631	1637		modernc.org/xc v1.0.0/go.mod h1:mRNCo0bvLjGhHO9WsyuKVU4q0ceiDDDoEeWDJHrNx8I=
1632	1638		mvdan.cc/sh/v3 v3.6.0 h1:gtva4EXJ0dFNvl5bHjcUEvws+KRcDslT8VKheTYkbGU=
1633	1639		mvdan.cc/sh/v3 v3.6.0/go.mod h1:U4mhtBLZ32iWhif5/lD+ygy1zrgaQhUu+XFy7C8+TTA=
	1640	+	mvdan.cc/unparam v0.0.0-20211214103731-d0ef000c54e5 h1:Jh3LAeMt1eGpxomyu3jVkmVZWW2MxZ1qIIV2TZ/nRio=
1634	1641		nhooyr.io/websocket v1.8.7/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0=
1635	1642		rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
1636	1643		rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
		skipped 7 lines
1644	1651		sigs.k8s.io/structured-merge-diff/v4 v4.0.2 h1:YHQV7Dajm86OuqnIR6zAelnDWBRjo+YhYV9PmGrh1s8=
1645	1652		sigs.k8s.io/structured-merge-diff/v4 v4.0.2/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK1F7G282QMXDPYydCw=
1646	1653		sigs.k8s.io/yaml v1.1.0/go.mod h1:UJmg0vDUVViEyp3mgSv9WPwZCDxu4rQW1olrI1uml+o=
1647		-	sigs.k8s.io/yaml v1.2.0 h1:kr/MCeFWJWTwyaHoR9c8EjH9OumOmoF9YGiZd7lFm/Q=
1648	1654		sigs.k8s.io/yaml v1.2.0/go.mod h1:yfXDCHCao9+ENCvLSE62v9VSji2MKu5jeNfTrofGhJc=
	1655	+	sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
	1656	+	sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
1649	1657