Upgrading to Scorecard v4.2.0 fails #246
Description
➜ scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ go mod tidy
go: downloading github.com/sigstore/cosign v1.7.2
go: downloading github.com/xeipuuv/gojsonschema v1.2.0
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/frankban/quicktest v1.13.1
go: downloading github.com/google/go-replayers/grpcreplay v1.1.0
go: downloading github.com/rogpeppe/go-internal v1.8.1-0.20210923151022-86f73c517451
go: downloading github.com/google/martian v2.1.1-0.20190517191504-25dcb96d9e51+incompatible
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.3
go: downloading github.com/google/go-containerregistry v0.8.1-0.20220209165246-a44adc326839
go: downloading github.com/sigstore/sigstore v1.2.1-0.20220401110139-0e610e39782f
go: downloading github.com/google/certificate-transparency-go v1.1.2
go: downloading github.com/sigstore/fulcio v0.1.2-0.20220114150912-86a2036f9bc7
go: downloading knative.dev/pkg v0.0.0-20220325200448-1f7514acd0c2
go: downloading github.com/secure-systems-lab/go-securesystemslib v0.3.1
go: downloading github.com/go-openapi/runtime v0.23.3
go: downloading github.com/go-piv/piv-go v1.9.0
go: downloading github.com/cyberphone/json-canonicalization v0.0.0-20210823021906-dc406ceaf94b
go: downloading github.com/google/trillian v1.4.0
go: downloading github.com/in-toto/in-toto-golang v0.3.4-0.20211211042327-af1f9fb822bf
go: downloading github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220228164355-396b2034c795
go: downloading github.com/ThalesIgnite/crypto11 v1.2.5
go: downloading github.com/miekg/pkcs11 v1.1.1
go: downloading github.com/go-test/deep v1.0.8
go: downloading github.com/letsencrypt/boulder v0.0.0-20220331220046-b23ab962616e
go: downloading github.com/coreos/go-oidc/v3 v3.1.0
go: downloading gopkg.in/square/go-jose.v2 v2.6.0
go: downloading github.com/segmentio/ksuid v1.0.4
go: downloading github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
go: downloading github.com/go-rod/rod v0.104.4
go: downloading github.com/fullstorydev/grpcurl v1.8.2
go: downloading go.etcd.io/etcd/etcdctl/v3 v3.5.0
go: downloading go.etcd.io/etcd/v3 v3.5.0
go: downloading github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb
go: downloading go.uber.org/goleak v1.1.12
go: downloading github.com/spiffe/go-spiffe/v2 v2.0.0
go: downloading github.com/Azure/go-autorest/autorest v0.11.25
go: downloading github.com/xanzy/go-gitlab v0.62.0
go: downloading k8s.io/api v0.23.5
go: downloading k8s.io/apimachinery v0.23.5
go: downloading k8s.io/client-go v0.23.5
go: downloading github.com/shibumi/go-pathspec v1.3.0
go: downloading github.com/Azure/azure-sdk-for-go v63.0.0+incompatible
go: downloading github.com/ReneKroon/ttlcache/v2 v2.11.0
go: downloading github.com/jmespath/go-jmespath/internal/testify v1.5.1
go: downloading cloud.google.com/go/kms v1.4.0
go: downloading github.com/hashicorp/vault/api v1.5.0
go: downloading github.com/google/go-github/v42 v42.0.0
go: downloading github.com/opentracing/opentracing-go v1.2.0
go: downloading github.com/go-playground/validator/v10 v10.10.0
go: downloading github.com/sassoftware/relic v0.0.0-20210427151427-dfb082b79b74
go: downloading github.com/spf13/afero v1.8.0
go: downloading gopkg.in/ini.v1 v1.66.3
go: downloading github.com/go-chi/chi v4.1.2+incompatible
go: downloading github.com/thales-e-security/pool v0.0.2
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
go: downloading github.com/jhump/protoreflect v1.9.0
go: downloading github.com/tidwall/pretty v1.2.0
go: downloading github.com/blang/semver v3.5.1+incompatible
go: downloading github.com/ysmood/goob v0.3.1
go: downloading github.com/ysmood/gson v0.7.0
go: downloading github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
go: downloading github.com/zeebo/errs v1.2.2
go: downloading go.etcd.io/etcd/etcdutl/v3 v3.5.0
go: downloading go.etcd.io/etcd/tests/v3 v3.5.0
go: downloading go.uber.org/atomic v1.9.0
go: downloading golang.org/x/time v0.0.0-20220224211638-0e9765cccd65
go: downloading gotest.tools/v3 v3.1.0
go: downloading github.com/google/gofuzz v1.2.0
go: downloading github.com/Azure/go-autorest/autorest/mocks v0.4.2
go: downloading github.com/cenkalti/backoff/v3 v3.2.2
go: downloading github.com/hashicorp/go-secure-stdlib/parseutil v0.1.3
go: downloading github.com/hashicorp/vault/sdk v0.4.1
go: downloading github.com/hashicorp/go-hclog v1.2.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.15.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.12.0
go: downloading k8s.io/klog/v2 v2.60.1-0.20220317184644-43cc75f9ae89
go: downloading github.com/go-playground/universal-translator v0.18.0
go: downloading github.com/leodido/go-urn v1.2.1
go: downloading github.com/go-playground/assert/v2 v2.0.1
go: downloading github.com/go-playground/locales v0.14.0
go: downloading github.com/PaesslerAG/jsonpath v0.1.1
go: downloading bitbucket.org/creachadair/shell v0.0.6
go: downloading github.com/jedisct1/go-minisign v0.0.0-20211028175153-1c139d1cc84b
go: downloading github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613
go: downloading github.com/ysmood/leakless v0.7.0
go: downloading github.com/urfave/cli v1.22.5
go: downloading go.etcd.io/etcd/pkg/v3 v3.5.0
go: downloading github.com/honeycombio/beeline-go v1.1.1
go: downloading github.com/dustin/go-humanize v1.0.0
go: downloading go.etcd.io/etcd/client/v3 v3.5.0
go: downloading gopkg.in/cheggaaa/pb.v1 v1.0.28
go: downloading go.etcd.io/bbolt v1.3.6
go: downloading go.etcd.io/etcd/raft/v3 v3.5.0
go: downloading go.etcd.io/etcd/server/v3 v3.5.0
go: downloading sigs.k8s.io/json v0.0.0-20211208200746-9f7c6b3444d2
go: downloading github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
go: downloading github.com/hashicorp/go-sockaddr v1.0.2
go: downloading github.com/soheilhy/cmux v0.1.5
go: downloading github.com/mitchellh/go-testing-interface v1.14.1
go: downloading github.com/go-sql-driver/mysql v1.6.0
go: downloading github.com/PaesslerAG/gval v1.0.0
go: downloading github.com/jmhodges/clock v0.0.0-20160418191101-880ee4c33548
go: downloading github.com/honeycombio/libhoney-go v1.15.2
go: downloading github.com/jonboulle/clockwork v0.2.2
go: downloading github.com/ryanuber/go-glob v1.0.0
go: downloading go.opentelemetry.io/contrib v1.3.0
go: downloading github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802
go: downloading go.opentelemetry.io/otel/exporters/otlp v0.20.0
go: downloading gopkg.in/natefinch/lumberjack.v2 v2.0.0
go: downloading github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5
go: downloading github.com/hashicorp/go-secure-stdlib/mlock v0.1.2
go: downloading github.com/hashicorp/go-uuid v1.0.3
go: downloading github.com/nxadm/tail v1.4.8
go: downloading gopkg.in/alexcesaro/statsd.v2 v2.0.0
go: downloading github.com/facebookgo/muster v0.0.0-20150708232844-fd3d7953fd52
go: downloading github.com/vmihailenco/msgpack/v4 v4.3.12
go: downloading go.opentelemetry.io/otel/sdk/export/metric v0.20.0
go: downloading go.opentelemetry.io/otel/sdk/metric v0.20.0
go: downloading go.opentelemetry.io/proto/otlp v0.12.0
go: downloading github.com/form3tech-oss/jwt-go v3.2.5+incompatible
go: downloading github.com/hashicorp/yamux v0.0.0-20211028200310-0bc27b27de87
go: downloading github.com/oklog/run v1.1.0
go: downloading github.com/fatih/structs v1.1.0
go: downloading github.com/BurntSushi/toml v0.4.1
go: downloading github.com/cockroachdb/errors v1.2.4
go: downloading k8s.io/kube-openapi v0.0.0-20220124234850-424119656bbf
go: downloading go.opentelemetry.io/contrib/propagators v0.19.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
go: downloading github.com/facebookgo/limitgroup v0.0.0-20150612190941-6abd8d71ec01
go: downloading github.com/vmihailenco/tagparser v0.1.1
go: downloading go.opentelemetry.io/otel/internal/metric v0.27.0
go: downloading github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f
go: downloading github.com/getsentry/raven-go v0.2.0
go: downloading github.com/certifi/gocertifi v0.0.0-20200922220541-2c3bb06c6054
go: finding module for package go.opentelemetry.io/otel/semconv
go: finding module for package go.opentelemetry.io/otel/metric/registry
go: downloading go.opentelemetry.io/otel v1.7.0
go: downloading go.opentelemetry.io/otel/metric v0.30.0
go: downloading go.opentelemetry.io v0.1.0
github.com/ossf/scorecard-action/signing imports
github.com/sigstore/cosign/cmd/cosign/cli/sign imports
github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier imports
github.com/google/certificate-transparency-go imports
go.etcd.io/etcd/v3 imports
go.etcd.io/etcd/tests/v3/integration imports
go.etcd.io/etcd/server/v3/embed imports
go.opentelemetry.io/otel/semconv: module go.opentelemetry.io/otel@latest found (v1.7.0), but does not contain package go.opentelemetry.io/otel/semconv
github.com/ossf/scorecard-action/signing imports
github.com/sigstore/cosign/cmd/cosign/cli/sign imports
github.com/sigstore/cosign/cmd/cosign/cli/fulcio/fulcioverifier imports
github.com/google/certificate-transparency-go imports
go.etcd.io/etcd/v3 imports
go.etcd.io/etcd/tests/v3/integration imports
go.etcd.io/etcd/server/v3/embed imports
go.opentelemetry.io/otel/exporters/otlp imports
go.opentelemetry.io/otel/sdk/metric/controller/basic imports
go.opentelemetry.io/otel/metric/registry: module go.opentelemetry.io/otel/metric@latest found (v0.30.0), but does not contain package go.opentelemetry.io/otel/metric/registry
➜ scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ make help
make: *** No rule to make target `help'. Stop.
➜ scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ vim Makefile
➜ scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ make build
# Run go build and generate scorecard executable
CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -ldflags '-w -extldflags'
../../../../pkg/mod/github.com/sigstore/[email protected]/pkg/signature/kms/aws/client.go:33:2: missing go.sum entry for module providing package github.com/aws/aws-sdk-go/aws (imported by github.com/sigstore/sigstore/pkg/signature/kms/aws); to add:
go get github.com/sigstore/sigstore/pkg/signature/kms/[email protected]
../../../../pkg/mod/github.com/sigstore/[email protected]/pkg/signature/kms/aws/client.go:34:2: missing go.sum entry for module providing package github.com/aws/aws-sdk-go/aws/session (imported by github.com/sigstore/sigstore/pkg/signature/kms/aws); to add:
go get github.com/sigstore/sigstore/pkg/signature/kms/[email protected]
../../../../pkg/mod/github.com/sigstore/[email protected]/pkg/signature/kms/aws/client.go:35:2: missing go.sum entry for module providing package github.com/aws/aws-sdk-go/service/kms (imported by github.com/sigstore/sigstore/pkg/signature/kms/aws); to add:
go get github.com/sigstore/sigstore/pkg/signature/kms/[email protected]
../../../../pkg/mod/github.com/containerd/stargz-snapshotter/[email protected]/build.go:40:2: missing go.sum entry for module providing package github.com/klauspost/compress/zstd (imported by github.com/containerd/stargz-snapshotter/estargz); to add:
go get github.com/containerd/stargz-snapshotter/[email protected]
make: *** [build] Error 1
➜ scorecard-action git:(naveen/feat/upgrade-scorecard) ✗ go version
go version go1.17.9 darwin/amd64```
Metadata
Metadata
Assignees
Labels
No labels