Skip to content

Conversation

@eyalk007
Copy link
Collaborator

  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.
  • Update documentation about new features / new supported technologies


func (golang *GoPackageHandler) UpdateDependency(vulnDetails *utils.VulnerabilityDetails) error {
// Configure resolution from an Artifactory server if needed
if golang.depsRepo != "" {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we want to stop support depsRepo, so those lines can be removed

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i say comment this needs to be back by q1 in my eyes

)

type GoPackageHandler struct {
CommonPackageHandler
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so we dont need and want the CommonPackageHandler right?

Copy link
Collaborator Author

@eyalk007 eyalk007 Dec 17, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i believe it should not exist
maybe in the future in a diff way with the parsing, but for now we should delete implementation package by package manager

}

func (golang *GoPackageHandler) allowLockfileManipulation() []string {
return append(os.Environ(), "GOFLAGS=-mod=mod")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we have "GOFLAGS=-mod=mod" in a const in the beginning so it will be more clear which flags are being used for each package handler?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

feels like overkill

"github.com/jfrog/jfrog-client-go/utils/log"
)

type GoPackageHandler struct {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what do you think ti change the PackageHandler name to something more clear? for example "GolangFixPrCreator

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GolangPackageFixer

@eyalk007 eyalk007 changed the title better fix for golang fix the golang package updater Dec 18, 2025
@eyalk007 eyalk007 self-assigned this Dec 18, 2025
@eyalk007 eyalk007 added the improvement Automatically generated release notes label Dec 18, 2025
@eyalk007 eyalk007 changed the title fix the golang package updater Fix the golang package updater Dec 21, 2025
@eyalk007 eyalk007 force-pushed the fix-go-package-handler branch from 7baec21 to 1df000e Compare December 22, 2025 11:36
- Delete old gopackagehandler.go
- Add new gopackageupdater.go with improved Go module handling
- Add v prefix support for Go modules
- Add vendor directory support
- Update commonpackagehandler.go with shared utilities
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants