| 13 Jul 2023 |
@eyjhb:eyjhb.dk | In reply to @qbit:tapenet.org https://go.dev/blog/govulncheck - it would be neat if we had some sorta integration with this.. like a checkphase or something Thanks for sharing, didn't even know about this | 15:55:08 |
j-k | I was very excited when it was announced. I was fed up of explaining no this critical k8s vuln doesn't affect my linter that transitively imports k8s stuff. pretty much every single week. | 15:57:42 |
@qbit:tapenet.org | heh | 15:58:30 |
@qbit:tapenet.org | i have been using it for a bit now, it seems to do a really good job | 15:58:48 |
@qbit:tapenet.org | really low false positive rate (not sure i have seen one.. ) | 15:59:07 |
j-k | I'm surprised they didn't bump the modules for 1.0.0, I doubt none of these have updated since | 15:59:52 |
@qbit:tapenet.org | oh, hah - i didn't even notice the vendorHash didn't change | 16:02:47 |