search

sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
562 stars 74 forks source link

re-read "path" when processing `replace` directive. fixes #256 #257

Closed bhamail closed 2 years ago

bhamail commented 2 years ago

Replace directives can replace both the Path and the Version of a dependency, so we need to re-read the Path when we come across a Replace directive.

It relates to the following issue #s:

@SzekeresB

@danieljmt might be interested too.

cc @bhamail / @DarthHater