search

snyk / leaky-vessels-static-detector

Static detection tool for runc and Docker "Leaky Vessels" vulnerabilities
https://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/
Apache License 2.0
94 stars 17 forks source link

Module name not set properly in `go.mod` #10

Closed bstncartwright closed 4 months ago

bstncartwright commented 4 months ago

In the go.mod file the module is currently set as static-detector. This works if we want to clone the module and run it that way, but if we want to run the module with go run github.com/synk/leaky-vessels-static-detector@latest (to not require cloning and such, just running it).

To fix this all we would need to do is update the go.mod file to have the module be github.com/synk/leaky-vessels-static-detector.

supriza commented 4 months ago

Hi @bstncartwright, you're of course right - the project will not work as a Go module as it was intended to run as a cli tool. Unfortunately, that rather small change will require us to amend quite a lot of external communications. As a workaround I suggest you fork the repo and run go mod edit -replace static-detector=[YOUR URL] and also change the scope of any private functions you'd like to export. Hope this helps :)