dependency-check / dependency-check/DependencyCheck
Golang: Go mod bails on vendor directory
Open
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
MacOS: 11.6.1
Dependency-check: 6.5.3
Command I ran
`dependency-check --project Usher --go /usr/local/bin/go --enableExperimental -s .`
Produces the following error:
```
[ERROR] Error analyzing '/Users/x4e5/go/src/gitlab.nordstrom.com/devx/utilities/usher/vendor/gopkg.in/yaml.v2/go.mod'; Error parsing output from `go list -json -m all`
```
Because that go command is an invalid command to run. It errors if you run it directly.
```
$ go list -json -m all
go list -m: can't compute 'all' using the vendor directory
(Use -mod=mod or -mod=readonly to bypass.)
```
Contributor guide
Assessment
This issue has not been assessed yet.