infobloxopen / migrate / 35296949798
53%
ib: 53%

LAST BUILD BRANCH: refs/tags/v1.0.13
DEFAULT BRANCH: ib
Ran
Jobs 1
Files 60
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 52.649%. Remained the same
35296949798

Pull #66

github

daniel-garcia 
Drop github.com/docker/docker via org-controlled dktest fork

github.com/docker/docker carries five advisories that no version bump can
clear: the module path stopped publishing at v28.5.2 (which we already
had) when the project renamed to github.com/moby/moby/v2, so the Go vuln
DB records them as `introduced: 0` with no fixed event. Trivy suggests a
fix at 29.3.1, but that is the Docker project release number and is not
resolvable on this module path -- `go get` rejects it as an unknown
revision.

Nothing in the shipped binary reaches this code; govulncheck reports zero
reachable vulnerabilities either way. It is imported only by dktesting,
which is used exclusively from _test.go files. The cost is manifest-level:
SCA tooling (BlackDuck Polaris, trivy) flags all five regardless of
reachability. Upstream hit the same problem and migrated their own test
harness off it in 3add8f4.

The only remaining requirement was dhui/dktest, whose latest release
(v0.4.6) still imports docker/docker. dhui/dktest#53 migrates it to
github.com/moby/moby and is open but unmerged, so this points the
requirement at our own fork of that branch, pinned to the exact commit.
It needs no new dependencies: moby/moby/api v1.54.2 and moby/moby/client
v0.4.1 are the versions this module already used, and neither path is
flagged -- the advisories name the github.com/moby/moby root module, not
those subpaths.

Trivy manifest findings go from 5 to 1; what remains is the x/crypto
openpgp advisory, which has no fix on any version and stays only because
x/crypto is in the module graph. The openpgp package itself is no longer
imported.

Revert this replace once dhui/dktest#53 ships a tagged release. Note that
replace directives are ignored by downstream consumers, so this affects
only builds and scans of this repository.

Verified: go build, go vet (which type-checks every _test.go, where
dktesting is consumed), and the non-docker test packages all pass.
Pull Request #66: Drop github.com/docker/docker via org-controlled dktest fork

4442 of 8437 relevant lines covered (52.65%)

6491.71 hits per line

Jobs
ID Job ID Ran Files Coverage
1 Go-1.26.x - 35296949798.1 60
52.65
GitHub Action Run
Source Files on build 35296949798