Problem statement
Recently we've introduced the toolchain keyword (as described in: https://go.dev/blog/toolchain) in our Go project Kong/kubernetes-ingress-controller@4422d51 and since then our fossa scans yield:
An issue occurred
>>> Relevant errors
Error
Command execution failed:
Attempted to run the command 'go list -e -json -deps all'
inside the working directory '/home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/',
but failed, because the command exited with code '1'.
Often, this kind of error is caused by the project not being ready to build;
please ensure that the project at '/home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/'
builds successfully before running fossa.
The logs for the command are listed below.
They will likely provide guidance on how to resolve this error.
Command did not write a standard log.
Command error log:
go: errors parsing go.mod:
/home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/go.mod:5: unknown directive: toolchain
If you believe this to be a defect, please report a bug to FOSSA support at https://support.fossa.com/
Traceback:
- Running command 'go'
- Getting dependencies using 'go list -e -json -deps all'
- analysis using go list (V3 Resolver)
- Dynamic analysis
- Gomodules
- Project Analysis: GomodProjectType
Error
Error parsing file: /home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/go.mod.
/home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/go.mod:5:1:
|
5 | toolchain go1.21.0
| ^
unexpected 't'
expecting "exclude", "go", "replace", "require", "retract", or end of input
If you believe this to be a defect, please report a bug to FOSSA support at https://support.fossa.com/, with a copy of:
/home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/go.mod
Traceback:
- Parsing file '/home/runner/work/kubernetes-ingress-controller/kubernetes-ingress-controller/go.mod'
- Static analysis
- Gomodules
- Project Analysis: GomodProjectType
Manually running fossa locally passes:
FOSSA_API_KEY=XXXXXXXXXXXXXXXXXXXX ./fossa analyze .
Analyzing gomod project at /Users/X/code_/kubernetes-ingress-controller/
Skipping gomod project at "/Users/X/code_/kubernetes-ingress-controller/third_party/" (default non-production path filtering)
NOTE: /Users/X/code_/kubernetes-ingress-controller/ analyzed using V3 Go Resolver.
As of v3.8.5 we have changed our dynamic Go strategy. If you've analyzed this project before, results may have changed.
See https://github.com/fossas/fossa-cli/blob/master/docs/references/strategies/languages/golang/v3-go-resolver-transition-qa.md for more information.
Scan Summary
------------
fossa-cli version 3.8.11 (revision b8973c30f5cf compiled with ghc-9.0)
fossa endpoint server version: 4.14.18
2 projects scanned; 1 skipped, 1 succeeded, 0 failed, 0 analysis warnings
* gomod project in "/Users/X/code_/kubernetes-ingress-controller/": succeeded
* gomod project in "/Users/X/code_/kubernetes-ingress-controller/third_party/": skipped (non-production path filtering)
-
Some projects may not appear in the summary if they were filtered during discovery.
You can run `fossa list-targets` to see all discoverable projects.
You can pass `--debug` option to eagerly show all warning and failure messages.
You can also view analysis summary with warning and error messages at: "/private/var/folders/0m/_63w01516tgf3cftmp9h7ylm0000gn/T/fossa-analyze-scan-summary.txt"
------------
Using project name: `git@github.com:Kong/kubernetes-ingress-controller.git`
Using revision: `d781042d455b82e079194728d72c4d451f9422d6`
Using branch: `main`
============================================================
View FOSSA Report:
https://app.fossa.com/projects/custom%XXXXXXXXXX%2fgit%40github.com:Kong%2fkubernetes-ingress-controller.git/refs/branch/main/XXXXXXXXXXXXXXXXXXXXXXXXXXXX
============================================================
Expected behavior
Fossa scans work for projects using Go's 1.21 toolchain directive.
Problem statement
Recently we've introduced the
toolchainkeyword (as described in: https://go.dev/blog/toolchain) in our Go project Kong/kubernetes-ingress-controller@4422d51 and since then our fossa scans yield:Manually running
fossalocally passes:Expected behavior
Fossa scans work for projects using Go's 1.21
toolchaindirective.