Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/go-test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,21 +7,21 @@
branches: [ main ]

jobs:
test:

Check warning on line 10 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

go-test.yml:10: overly broad permissions: default permissions used due to no permissions: block
name: Run go test
runs-on: ubuntu-latest

steps:
- name: Checkout
uses: actions/checkout@v7

Check failure on line 16 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 16 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-test.yml:16: unpinned action reference: action is not pinned to a hash (required by blanket policy)

- name: Set up Go
uses: actions/setup-go@v6

Check failure on line 19 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 19 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-test.yml:19: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
go-version: 1.26.4
go-version: 1.26.6

- name: Cache Go modules
uses: actions/cache@v6

Check failure on line 24 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 24 in .github/workflows/go-test.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses

go-test.yml:24: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: |
~/.cache/go-build
Expand Down
6 changes: 2 additions & 4 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -4,21 +4,19 @@ go 1.24.4

require (
github.com/CycloneDX/cyclonedx-go v0.11.0
github.com/google/sbom-conformance v0.0.0-20260528190224-06e987e31d2b
github.com/google/sbom-conformance v0.0.0-20260724144510-28115fbbe91e
github.com/spdx/tools-golang v0.5.7
github.com/spf13/cobra v1.10.2
github.com/spf13/pflag v1.0.10
github.com/stretchr/testify v1.11.1
github.com/stretchr/testify v1.12.0
k8s.io/klog/v2 v2.140.0
)

require (
github.com/anchore/go-struct-converter v0.1.0 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/go-logr/logr v1.4.1 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
go.yaml.in/yaml/v2 v2.4.2 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
sigs.k8s.io/yaml v1.6.0 // indirect
Expand Down
8 changes: 4 additions & 4 deletions go.sum
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,8 @@ github.com/go-logr/logr v1.4.1 h1:pKouT5E8xu9zeFC39JXRDukb6JFQPXM5p5I91188VAQ=
github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
github.com/google/sbom-conformance v0.0.0-20260528190224-06e987e31d2b h1:RXG/nvWe0/i87H5U5vptkV9ZFHIlUpMubCC8PKszsUw=
github.com/google/sbom-conformance v0.0.0-20260528190224-06e987e31d2b/go.mod h1:Y6Jl+ar289Z7cc3z8jL6wYnl1rYcttgXT9Y5ciHEEAM=
github.com/google/sbom-conformance v0.0.0-20260724144510-28115fbbe91e h1:CTon8ZLCV/EJRaSB+hTDQtiSikEBLmD7CfWUP0hhAv0=
github.com/google/sbom-conformance v0.0.0-20260724144510-28115fbbe91e/go.mod h1:Y6Jl+ar289Z7cc3z8jL6wYnl1rYcttgXT9Y5ciHEEAM=
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
Expand All @@ -27,8 +27,8 @@ github.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiT
github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
github.com/stretchr/testify v1.12.0 h1:K6Mr6jO9JICuend/5xzTM03ydSV3vdNRYAdPSukj8uI=
github.com/stretchr/testify v1.12.0/go.mod h1:bOYBZb5qJ00vPzWfIqBUZPaxK8jWiXc6d3ErP4Ca9Gw=
github.com/terminalstatic/go-xsd-validate v0.1.6 h1:TenYeQ3eY631qNi1/cTmLH/s2slHPRKTTHT+XSHkepo=
github.com/terminalstatic/go-xsd-validate v0.1.6/go.mod h1:18lsvYFofBflqCrvo1umpABZ99+GneNTw2kEEc8UPJw=
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f h1:J9EGpcZtP0E/raorCMxlFGSTBrsSlaDGf3jU/qvAE2c=
Expand Down
Loading