praetorian-inc / gokart

A static analysis tool for securing Go code
Apache License 2.0
2.18k stars 110 forks source link

Error message for unloadable packages is inactionable #56

Closed bradlarsen closed 3 years ago

bradlarsen commented 3 years ago

When GoKart scans a project, if dependencies fail to load, an error message is emitted. But the message is sparse on details, and doesn't give any clue as to what went wrong.

For example, when looking at go-algorand using gokart commit bb678c03 and go version go1.17.1 darwin/amd64, I get this:

gokart scan -v
Using config found at /Users/blarsen/.gokart/analyzers.yml

Revving engines VRMMM VRMMM
3...2...1...Go!

Uh oh, a dashboard light is on! GoKart was unable to load the following packages:
- "github.com/algorand/go-algorand/crypto"
- "github.com/algorand/go-algorand/data/committee/sortition"

...

Why did those packages fail to load? Are there more details that GoKart is omitting?