Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrading to Scorecard v4.2.0 fails #246

Closed
naveensrinivasan opened this issue May 6, 2022 · 2 comments · Fixed by #247
Closed

Upgrading to Scorecard v4.2.0 fails #246

naveensrinivasan opened this issue May 6, 2022 · 2 comments · Fixed by #247
Assignees
@naveensrinivasan

Comments

@naveensrinivasan
Copy link
Member 

➜  scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ go mod tidy
go: downloading github.com/sigstore/cosign v1.7.2
go: downloading github.com/xeipuuv/gojsonschema v1.2.0
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/frankban/quicktest v1.13.1
go: downloading github.com/google/go-replayers/grpcreplay v1.1.0
go: downloading github.com/rogpeppe/go-internal v1.8.1-0.20210923151022-86f73c517451
go: downloading github.com/google/martian v2.1.1-0.20190517191504-25dcb96d9e51+incompatible
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.3
go: downloading github.com/google/go-containerregistry v0.8.1-0.20220209165246-a44adc326839
go: downloading github.com/sigstore/sigstore v1.2.1-0.20220401110139-0e610e39782f
go: downloading github.com/google/certificate-transparency-go v1.1.2
go: downloading github.com/sigstore/fulcio v0.1.2-0.20220114150912-86a2036f9bc7
go: downloading knative.dev/pkg v0.0.0-20220325200448-1f7514acd0c2
go: downloading github.com/secure-systems-lab/go-securesystemslib v0.3.1
go: downloading github.com/go-openapi/runtime v0.23.3
go: downloading github.com/go-piv/piv-go v1.9.0
go: downloading github.com/cyberphone/json-canonicalization v0.0.0-20210823021906-dc406ceaf94b
go: downloading github.com/google/trillian v1.4.0
go: downloading github.com/in-toto/in-toto-golang v0.3.4-0.20211211042327-af1f9fb822bf
go: downloading github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220228164355-396b2034c795
go: downloading github.com/ThalesIgnite/crypto11 v1.2.5
go: downloading github.com/miekg/pkcs11 v1.1.1
go: downloading github.com/go-test/deep v1.0.8
go: downloading github.com/letsencrypt/boulder v0.0.0-20220331220046-b23ab962616e
go: downloading github.com/coreos/go-oidc/v3 v3.1.0
go: downloading gopkg.in/square/go-jose.v2 v2.6.0
go: downloading github.com/segmentio/ksuid v1.0.4
go: downloading github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
go: downloading github.com/go-rod/rod v0.104.4
go: downloading github.com/fullstorydev/grpcurl v1.8.2
go: downloading go.etcd.io/etcd/etcdctl/v3 v3.5.0
go: downloading go.etcd.io/etcd/v3 v3.5.0
go: downloading github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb
go: downloading go.uber.org/goleak v1.1.12
go: downloading github.com/spiffe/go-spiffe/v2 v2.0.0
go: downloading github.com/Azure/go-autorest/autorest v0.11.25
go: downloading github.com/xanzy/go-gitlab v0.62.0
go: downloading k8s.io/api v0.23.5
go: downloading k8s.io/apimachinery v0.23.5
go: downloading k8s.io/client-go v0.23.5
go: downloading github.com/shibumi/go-pathspec v1.3.0
go: downloading github.com/Azure/azure-sdk-for-go v63.0.0+incompatible
go: downloading github.com/ReneKroon/ttlcache/v2 v2.11.0
go: downloading github.com/jmespath/go-jmespath/internal/testify v1.5.1
go: downloading cloud.google.com/go/kms v1.4.0
go: downloading github.com/hashicorp/vault/api v1.5.0
go: downloading github.com/google/go-github/v42 v42.0.0
go: downloading github.com/opentracing/opentracing-go v1.2.0
go: downloading github.com/go-playground/validator/v10 v10.10.0
go: downloading github.com/sassoftware/relic v0.0.0-20210427151427-dfb082b79b74
go: downloading github.com/spf13/afero v1.8.0
go: downloading gopkg.in/ini.v1 v1.66.3
go: downloading github.com/go-chi/chi v4.1.2+incompatible
go: downloading github.com/thales-e-security/pool v0.0.2
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
go: downloading github.com/jhump/protoreflect v1.9.0
go: downloading github.com/tidwall/pretty v1.2.0
go: downloading github.com/blang/semver v3.5.1+incompatible
go: downloading github.com/ysmood/goob v0.3.1
go: downloading github.com/ysmood/gson v0.7.0
go: downloading github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
go: downloading github.com/zeebo/errs v1.2.2
go: downloading go.etcd.io/etcd/etcdutl/v3 v3.5.0
go: downloading go.etcd.io/etcd/tests/v3 v3.5.0
go: downloading go.uber.org/atomic v1.9.0
go: downloading golang.org/x/time v0.0.0-20220224211638-0e9765cccd65
go: downloading gotest.tools/v3 v3.1.0
go: downloading github.com/google/gofuzz v1.2.0
go: downloading github.com/Azure/go-autorest/autorest/mocks v0.4.2
go: downloading github.com/cenkalti/backoff/v3 v3.2.2
go: downloading github.com/hashicorp/go-secure-stdlib/parseutil v0.1.3
go: downloading github.com/hashicorp/vault/sdk v0.4.1
go: downloading github.com/hashicorp/go-hclog v1.2.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.15.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.12.0
go: downloading k8s.io/klog/v2 v2.60.1-0.20220317184644-43cc75f9ae89
go: downloading github.com/go-playground/universal-translator v0.18.0
go: downloading github.com/leodido/go-urn v1.2.1
go: downloading github.com/go-playground/assert/v2 v2.0.1
go: downloading github.com/go-playground/locales v0.14.0
go: downloading github.com/PaesslerAG/jsonpath v0.1.1
go: downloading bitbucket.org/creachadair/shell v0.0.6
go: downloading github.com/jedisct1/go-minisign v0.0.0-20211028175153-1c139d1cc84b
go: downloading github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613
go: downloading github.com/ysmood/leakless v0.7.0
go: downloading github.com/urfave/cli v1.22.5
go: downloading go.etcd.io/etcd/pkg/v3 v3.5.0
go: downloading github.com/honeycombio/beeline-go v1.1.1
go: downloading github.com/dustin/go-humanize v1.0.0
go: downloading go.etcd.io/etcd/client/v3 v3.5.0
go: downloading gopkg.in/cheggaaa/pb.v1 v1.0.28
go: downloading go.etcd.io/bbolt v1.3.6
go: downloading go.etcd.io/etcd/raft/v3 v3.5.0
go: downloading go.etcd.io/etcd/server/v3 v3.5.0
go: downloading sigs.k8s.io/json v0.0.0-20211208200746-9f7c6b3444d2
go: downloading github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
go: downloading github.com/hashicorp/go-sockaddr v1.0.2
go: downloading github.com/soheilhy/cmux v0.1.5
go: downloading github.com/mitchellh/go-testing-interface v1.14.1
go: downloading github.com/go-sql-driver/mysql v1.6.0
go: downloading github.com/PaesslerAG/gval v1.0.0
go: downloading github.com/jmhodges/clock v0.0.0-20160418191101-880ee4c33548
go: downloading github.com/honeycombio/libhoney-go v1.15.2
go: downloading github.com/jonboulle/clockwork v0.2.2
go: downloading github.com/ryanuber/go-glob v1.0.0
go: downloading go.opentelemetry.io/contrib v1.3.0
go: downloading github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802
go: downloading go.opentelemetry.io/otel/exporters/otlp v0.20.0
go: downloading gopkg.in/natefinch/lumberjack.v2 v2.0.0
go: downloading github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5
go: downloading github.com/hashicorp/go-secure-stdlib/mlock v0.1.2
go: downloading github.com/hashicorp/go-uuid v1.0.3
go: downloading github.com/nxadm/tail v1.4.8
go: downloading gopkg.in/alexcesaro/statsd.v2 v2.0.0
go: downloading github.com/facebookgo/muster v0.0.0-20150708232844-fd3d7953fd52
go: downloading github.com/vmihailenco/msgpack/v4 v4.3.12
go: downloading go.opentelemetry.io/otel/sdk/export/metric v0.20.0
go: downloading go.opentelemetry.io/otel/sdk/metric v0.20.0
go: downloading go.opentelemetry.io/proto/otlp v0.12.0
go: downloading github.com/form3tech-oss/jwt-go v3.2.5+incompatible
go: downloading github.com/hashicorp/yamux v0.0.0-20211028200310-0bc27b27de87
go: downloading github.com/oklog/run v1.1.0
go: downloading github.com/fatih/structs v1.1.0
go: downloading github.com/BurntSushi/toml v0.4.1
go: downloading github.com/cockroachdb/errors v1.2.4
go: downloading k8s.io/kube-openapi v0.0.0-20220124234850-424119656bbf
go: downloading go.opentelemetry.io/contrib/propagators v0.19.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
go: downloading github.com/facebookgo/limitgroup v0.0.0-20150612190941-6abd8d71ec01
go: downloading github.com/vmihailenco/tagparser v0.1.1
go: downloading go.opentelemetry.io/otel/internal/metric v0.27.0
go: downloading github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f
go: downloading github.com/getsentry/raven-go v0.2.0
go: downloading github.com/certifi/gocertifi v0.0.0-20200922220541-2c3bb06c6054
go: finding module for package go.opentelemetry.io/otel/semconv
go: finding module for package go.opentelemetry.io/otel/metric/registry
go: downloading go.opentelemetry.io/otel v1.7.0
go: downloading go.opentelemetry.io/otel/metric v0.30.0
go: downloading go.opentelemetry.io v0.1.0
github.com/ossf/scorecard-action/signing imports
	github.com/sigstore/cosign/cmd/cosign/cli/sign imports
	github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier imports
	github.com/google/certificate-transparency-go imports
	go.etcd.io/etcd/v3 imports
	go.etcd.io/etcd/tests/v3/integration imports
	go.etcd.io/etcd/server/v3/embed imports
	go.opentelemetry.io/otel/semconv: module go.opentelemetry.io/otel@latest found (v1.7.0), but does not contain package go.opentelemetry.io/otel/semconv
github.com/ossf/scorecard-action/signing imports
	github.com/sigstore/cosign/cmd/cosign/cli/sign imports
	github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier imports
	github.com/google/certificate-transparency-go imports
	go.etcd.io/etcd/v3 imports
	go.etcd.io/etcd/tests/v3/integration imports
	go.etcd.io/etcd/server/v3/embed imports
	go.opentelemetry.io/otel/exporters/otlp imports
	go.opentelemetry.io/otel/sdk/metric/controller/basic imports
	go.opentelemetry.io/otel/metric/registry: module go.opentelemetry.io/otel/metric@latest found (v0.30.0), but does not contain package go.opentelemetry.io/otel/metric/registry
➜  scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ make help
make: *** No rule to make target `help'.  Stop.
➜  scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ vim Makefile
➜  scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ make build
# Run go build and generate scorecard executable
CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -ldflags '-w -extldflags'
../../../../pkg/mod/github.com/sigstore/sigstore@v1.2.1-0.20220401110139-0e610e39782f/pkg/signature/kms/aws/client.go:33:2: missing go.sum entry for module providing package github.com/aws/aws-sdk-go/aws (imported by github.com/sigstore/sigstore/pkg/signature/kms/aws); to add:
	go get github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.2.1-0.20220401110139-0e610e39782f
../../../../pkg/mod/github.com/sigstore/sigstore@v1.2.1-0.20220401110139-0e610e39782f/pkg/signature/kms/aws/client.go:34:2: missing go.sum entry for module providing package github.com/aws/aws-sdk-go/aws/session (imported by github.com/sigstore/sigstore/pkg/signature/kms/aws); to add:
	go get github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.2.1-0.20220401110139-0e610e39782f
../../../../pkg/mod/github.com/sigstore/sigstore@v1.2.1-0.20220401110139-0e610e39782f/pkg/signature/kms/aws/client.go:35:2: missing go.sum entry for module providing package github.com/aws/aws-sdk-go/service/kms (imported by github.com/sigstore/sigstore/pkg/signature/kms/aws); to add:
	go get github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.2.1-0.20220401110139-0e610e39782f
../../../../pkg/mod/github.com/containerd/stargz-snapshotter/estargz@v0.11.3/build.go:40:2: missing go.sum entry for module providing package github.com/klauspost/compress/zstd (imported by github.com/containerd/stargz-snapshotter/estargz); to add:
	go get github.com/containerd/stargz-snapshotter/estargz@v0.11.3
make: *** [build] Error 1
➜  scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ go version
go version go1.17.9 darwin/amd64```
@naveensrinivasan naveensrinivasan self-assigned this May 6, 2022
@naveensrinivasan
Copy link
Member Author

@laurentsimon @azeemshaikh38 FYI...

@azeemshaikh38
Copy link
Contributor

Hmm, seems to work for me locally. Sent #247, please take a look.

@azeemshaikh38 azeemshaikh38 linked a pull request May 6, 2022 that will close this issue
✨ Update Scorecard version to v4.2.0 in Golang #247
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@naveensrinivasan naveensrinivasan

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

✨ Update Scorecard version to v4.2.0 in Golang ossf/scorecard-action
2 participants
@naveensrinivasan @azeemshaikh38