> On 25 Mar 2025, at 10:15, Gleb Popov <[email protected]> wrote: > > On Tue, Mar 25, 2025 at 1:14 PM Einar Bjarni Halldórsson <[email protected]> > wrote: >> >> Would it be advisable to add test code to go projects to always call >> govulncheck? It would add >> a TEST_DEPENDS on govulncheck (which hasn’t been committed yet) and it calls >> the >> vuln db at google. >> > I'd rather make it an argument of USES=go, something like USES=go:vulncheck > > This would allow Go ports to opt-in into the feature.
That’s a good idea. I’ll post it to freebsd-go and see if they’re interested. .einar
