dependency-check / dependency-check/DependencyCheck

Golang: Go mod bails on vendor directory

Open
#4,101 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

MacOS: 11.6.1
Dependency-check: 6.5.3

Command I ran
`dependency-check --project Usher --go /usr/local/bin/go --enableExperimental -s .`

Produces the following error:
```
[ERROR] Error analyzing '/Users/x4e5/go/src/gitlab.nordstrom.com/devx/utilities/usher/vendor/gopkg.in/yaml.v2/go.mod'; Error parsing output from `go list -json -m all`
```

Because that go command is an invalid command to run. It errors if you run it directly.
```
$ go list -json -m all
go list -m: can't compute 'all' using the vendor directory
(Use -mod=mod or -mod=readonly to bypass.)
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.