Skip to main content

Automated Pull Requests in Go

Go

Any go.mod file that exists in the repository will be searched for dependencies. Remediation PRs are created for the following scenarios:

  • Required modules declared in single or block require directives

    module example.com/my/thing

go 1.12

require golang.org/x/net v1.2.3
require golang.org/x/net/v2 v2.3.4

require (
  golang.org/x/crypto v1.4.5 // indirect
  golang.org/x/text/v3 v3.6.7
)

  • Replaced modules declared in single or block replace directives, having a full version specified on the right side of the replace directive

    module example.com/my/thing

go 1.12

replace golang.org/x/net v1.2.3 => golang.org/x/net v1.3.0 // a remediation PR may be created

replace ( 
  golang.org/x/crypto => golang.org/x/crypto v1.4.5        // a remediation PR may be created
  golang.org/x/text v1.2.3 => ../x/text                    // no remediation PR will be created
  golang.org/x/rest => ../x/rest                           // no remediation PR will be created
)