Merge pull request #974 from MichaelMure/fix/972/gokart-panic

Michael Muré created 2 years ago

fix(972): use prerelease of GoKart with repaired panic

Change summary

Makefile | 7 +++++--
go.mod   | 1 +
go.sum   | 2 ++
tools.go | 1 +
4 files changed, 9 insertions(+), 2 deletions(-)

Detailed changes

Makefile

@@ -39,12 +39,15 @@ secure: secure-practices secure-vulnerabilities
 
 .PHONY: secure-practices
 secure-practices:
-	go install github.com/praetorian-inc/gokart
+# TODO: change pinned version of GoKart to "latest" once PR #84 is merged
+#       https://github.com/praetorian-inc/gokart/pull/84
+# go install github.com/praetorian-inc/gokart@latest
+	go install github.com/selesy/gokart-pre
 	gokart scan
 
 .PHONY: secure-vulnerabilities
 secure-vulnerabilities:
-	go install golang.org/x/vuln/cmd/govulncheck@latest
+	go install golang.org/x/vuln/cmd/govulncheck
 	govulncheck ./... 
 
 .PHONY: test

go.mod

@@ -21,6 +21,7 @@ require (
 	github.com/mattn/go-isatty v0.0.17
 	github.com/phayes/freeport v0.0.0-20171002181615-b8543db493a5
 	github.com/pkg/errors v0.9.1
+	github.com/selesy/gokart-pre v0.5.2-rc1
 	github.com/shurcooL/githubv4 v0.0.0-20190601194912-068505affed7
 	github.com/skratchdot/open-golang v0.0.0-20190402232053-79abb63cd66e
 	github.com/spf13/cobra v1.6.1

go.sum

@@ -250,6 +250,8 @@ github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/segmentio/fasthash v1.0.3 h1:EI9+KE1EwvMLBWwjpRDc+fEM+prwxDYbslddQGtrmhM=
 github.com/segmentio/fasthash v1.0.3/go.mod h1:waKX8l2N8yckOgmSsXJi7x1ZfdKZ4x7KRMzBtS3oedY=
+github.com/selesy/gokart-pre v0.5.2-rc1 h1:TGgWu0hhD7kW1nKqx7qfOsBPm1jp1OlVtTMRPKetW5U=
+github.com/selesy/gokart-pre v0.5.2-rc1/go.mod h1:a2Ej7TE206x7KjQr2kud7nckfVFQaIv7ljzT1KxFdVg=
 github.com/sergi/go-diff v1.1.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
 github.com/sergi/go-diff v1.2.0 h1:XU+rvMAioB0UC3q1MFrIQy4Vo5/4VsRDQQXHsEya6xQ=
 github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=

tools.go

@@ -6,5 +6,6 @@ import (
 	_ "github.com/99designs/gqlgen"
 	_ "github.com/cheekybits/genny"
 	_ "github.com/praetorian-inc/gokart"
+	_ "github.com/selesy/gokart-pre"
 	_ "golang.org/x/vuln/cmd/govulncheck"
 )