phylum-dev / cli

Command line interface for the Phylum API
https://phylum.io
GNU General Public License v3.0
99 stars 10 forks source link

Use the `go.sum` parser as the default lockfile format for golang #1422

Closed ejortega closed 1 month ago

ejortega commented 1 month ago

Updates the lockfile detection to ignore go.mod files and default to the go.sum parser.

If the go.sum is missing, the go.mod file is recognized and can be parsed if the go directive is >= 1.17.

If the go directive criteria is not satisfied, the user will receive a message that the lockfile generation is required.

❯ phylum analyze -p test

❗ Could not parse manifest: Parsing "go.mod" requires lockfile generation, but it was disabled

Closes https://github.com/phylum-dev/cli/issues/1421

Checklist