From 70f083b09186ccf10ef3cd29623c1d66df284391 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 2 Nov 2023 02:28:52 +0000 Subject: [PATCH 1/2] chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.2 to 2.3.0 Bumps [github.com/owenrumney/go-sarif/v2](https://github.com/owenrumney/go-sarif) from 2.2.2 to 2.3.0. - [Release notes](https://github.com/owenrumney/go-sarif/releases) - [Changelog](https://github.com/owenrumney/go-sarif/blob/main/.goreleaser.yml) - [Commits](https://github.com/owenrumney/go-sarif/compare/v2.2.2...v2.3.0) --- updated-dependencies: - dependency-name: github.com/owenrumney/go-sarif/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 9090cca3bee1..3148cd994a41 100644 --- a/go.mod +++ b/go.mod @@ -76,7 +76,7 @@ require ( github.com/opencontainers/go-digest v1.0.0 github.com/opencontainers/image-spec v1.1.0-rc5 github.com/openvex/go-vex v0.2.5 - github.com/owenrumney/go-sarif/v2 v2.2.2 + github.com/owenrumney/go-sarif/v2 v2.3.0 github.com/package-url/packageurl-go v0.1.2 github.com/quasilyte/go-ruleguard/dsl v0.3.22 github.com/samber/lo v1.38.1 diff --git a/go.sum b/go.sum index a65dea828000..120c4b2b1e06 100644 --- a/go.sum +++ b/go.sum @@ -1466,8 +1466,8 @@ github.com/opentracing/opentracing-go v1.2.0/go.mod h1:GxEUsuufX4nBwe+T+Wl9TAgYr github.com/openvex/go-vex v0.2.5 h1:41utdp2rHgAGCsG+UbjmfMG5CWQxs15nGqir1eRgSrQ= github.com/openvex/go-vex v0.2.5/go.mod h1:j+oadBxSUELkrKh4NfNb+BPo77U3q7gdKME88IO/0Wo= github.com/owenrumney/go-sarif v1.1.1/go.mod h1:dNDiPlF04ESR/6fHlPyq7gHKmrM0sHUvAGjsoh8ZH0U= -github.com/owenrumney/go-sarif/v2 v2.2.2 h1:x2acaiiAW9hu+78wbEYBRGLk5nRtHmkv7HeUsKvblwc= -github.com/owenrumney/go-sarif/v2 v2.2.2/go.mod h1:MSqMMx9WqlBSY7pXoOZWgEsVB4FDNfhcaXDA1j6Sr+w= +github.com/owenrumney/go-sarif/v2 v2.3.0 h1:wP5yEpI53zr0v5cBmagXzLbHZp9Oylyo3AJDpfLBITs= +github.com/owenrumney/go-sarif/v2 v2.3.0/go.mod h1:MSqMMx9WqlBSY7pXoOZWgEsVB4FDNfhcaXDA1j6Sr+w= github.com/owenrumney/squealer v1.1.1 h1:e+fg29IxdNARSc4s7CbYnqVSepm9eOqErLNNNR5XbAs= github.com/owenrumney/squealer v1.1.1/go.mod h1:Q5ekVoyFSG2FlnCVIBGsyk/FSMA/ATv8PtwKIVX7t/o= github.com/package-url/packageurl-go v0.1.2 h1:0H2DQt6DHd/NeRlVwW4EZ4oEI6Bn40XlNPRqegcxuo4= From e40e02b57cb031d61027af6002dd20e25c10e4c1 Mon Sep 17 00:00:00 2001 From: DmitriyLewen Date: Thu, 2 Nov 2023 12:57:00 +0600 Subject: [PATCH 2/2] test: update sarif schema url --- integration/testdata/alpine-310.sarif.golden | 2 +- pkg/report/sarif_test.go | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/integration/testdata/alpine-310.sarif.golden b/integration/testdata/alpine-310.sarif.golden index cb4eb6616be6..535bd2d09f71 100644 --- a/integration/testdata/alpine-310.sarif.golden +++ b/integration/testdata/alpine-310.sarif.golden @@ -1,6 +1,6 @@ { "version": "2.1.0", - "$schema": "https://json.schemastore.org/sarif-2.1.0.json", + "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", "runs": [ { "tool": { diff --git a/pkg/report/sarif_test.go b/pkg/report/sarif_test.go index 62d60309ca3a..3ce0eab1d91b 100644 --- a/pkg/report/sarif_test.go +++ b/pkg/report/sarif_test.go @@ -89,7 +89,7 @@ func TestReportWriter_Sarif(t *testing.T) { }, want: &sarif.Report{ Version: "2.1.0", - Schema: "https://json.schemastore.org/sarif-2.1.0.json", + Schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", Runs: []*sarif.Run{ { Tool: sarif.Tool{ @@ -214,7 +214,7 @@ func TestReportWriter_Sarif(t *testing.T) { }, want: &sarif.Report{ Version: "2.1.0", - Schema: "https://json.schemastore.org/sarif-2.1.0.json", + Schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", Runs: []*sarif.Run{ { Tool: sarif.Tool{ @@ -354,7 +354,7 @@ func TestReportWriter_Sarif(t *testing.T) { }, want: &sarif.Report{ Version: "2.1.0", - Schema: "https://json.schemastore.org/sarif-2.1.0.json", + Schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", Runs: []*sarif.Run{ { Tool: sarif.Tool{ @@ -448,7 +448,7 @@ func TestReportWriter_Sarif(t *testing.T) { }, want: &sarif.Report{ Version: "2.1.0", - Schema: "https://json.schemastore.org/sarif-2.1.0.json", + Schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", Runs: []*sarif.Run{ { Tool: sarif.Tool{ @@ -518,7 +518,7 @@ func TestReportWriter_Sarif(t *testing.T) { name: "no vulns", want: &sarif.Report{ Version: "2.1.0", - Schema: "https://json.schemastore.org/sarif-2.1.0.json", + Schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", Runs: []*sarif.Run{ { Tool: sarif.Tool{