NVIDIA / gpu-operator / 40923347660

37%

main: 37%

Pull #3137

github

migrate to Masterminds/semver

This change switches to the Masterminds/semver for semver processing
over golang.org/x/mod. This is motivated by the following reasons:

- golang.org/x/mod is a module meant for interacting with go modules primarily
- golang.org/x/mod has had CVEs associated with it in the past.
Masterminds/semver does not import any other module itself so the overall
CVE surface is reduced with this change.

Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>

3 of 9 new or added lines in 3 files covered. (33.33%)

6000 of 16189 relevant lines covered (37.06%)

0.37 hits per line