Repository: git-bug/git-bug (language: go)

Issue:
GoKart scanning is panicking
I've created a PR to fix the issue in GoKart (https://github.com/praetorian-inc/gokart/pull/84) along with the associated issue (https://github.com/praetorian-inc/gokart/issues/83) containing the stack trace.

While I was working on GoKart I also took care of upgrading it to better scan generics which should be helpful.  I'll try to figure out a way to build the project from an alternate repository (my fork) which is hampered by `go install` constraints.


Discussion / hints:
Neat!

> I'll try to figure out a way to build the project from an alternate repository (my fork) which is hampered by go install constraints.

Maybe just wait a bit to see if upstream merge your PR? Otherwise I think you'd need to git clone and compile, which is a bit cumbersome.
Yeah ... I just know this project can be slow (but I think maybe a panic will get faster attention.  If neither happens this week, I'll put a PR in `git-bug` to turn off GoKart scanning temporarily and a tracking issue to re-enable it later.  Next I'm going to see about the periodic security scanning (which will also be impacted by the panic).

Fix patch:
diff --git a/Makefile b/Makefile
index 14cf444d3..46c307f43 100644
--- a/Makefile
+++ b/Makefile
@@ -39,12 +39,15 @@ secure: secure-practices secure-vulnerabilities
 
 .PHONY: secure-practices
 secure-practices:
-	go install github.com/praetorian-inc/gokart
+# TODO: change pinned version of GoKart to "latest" once PR #84 is merged
+#       https://github.com/praetorian-inc/gokart/pull/84
+# go install github.com/praetorian-inc/gokart@latest
+	go install github.com/selesy/gokart-pre
 	gokart scan
 
 .PHONY: secure-vulnerabilities
 secure-vulnerabilities:
-	go install golang.org/x/vuln/cmd/govulncheck@latest
+	go install golang.org/x/vuln/cmd/govulncheck
 	govulncheck ./... 
 
 .PHONY: test
diff --git a/go.mod b/go.mod
index 34081235e..0662c77af 100644
--- a/go.mod
+++ b/go.mod
@@ -21,6 +21,7 @@ require (
 	github.com/mattn/go-isatty v0.0.17
 	github.com/phayes/freeport v0.0.0-20171002181615-b8543db493a5
 	github.com/pkg/errors v0.9.1
+	github.com/selesy/gokart-pre v0.5.2-rc1
 	github.com/shurcooL/githubv4 v0.0.0-20190601194912-068505affed7
 	github.com/skratchdot/open-golang v0.0.0-20190402232053-79abb63cd66e
 	github.com/spf13/cobra v1.6.1
diff --git a/go.sum b/go.sum
index 4c8bc4fcd..3199c6084 100644
--- a/go.sum
+++ b/go.sum
@@ -250,6 +250,8 @@ github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/segmentio/fasthash v1.0.3 h1:EI9+KE1EwvMLBWwjpRDc+fEM+prwxDYbslddQGtrmhM=
 github.com/segmentio/fasthash v1.0.3/go.mod h1:waKX8l2N8yckOgmSsXJi7x1ZfdKZ4x7KRMzBtS3oedY=
+github.com/selesy/gokart-pre v0.5.2-rc1 h1:TGgWu0hhD7kW1nKqx7qfOsBPm1jp1OlVtTMRPKetW5U=
+github.com/selesy/gokart-pre v0.5.2-rc1/go.mod h1:a2Ej7TE206x7KjQr2kud7nckfVFQaIv7ljzT1KxFdVg=
 github.com/sergi/go-diff v1.1.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
 github.com/sergi/go-diff v1.2.0 h1:XU+rvMAioB0UC3q1MFrIQy4Vo5/4VsRDQQXHsEya6xQ=
 github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
diff --git a/tools.go b/tools.go
index a52fba0ce..69230ed6a 100644
--- a/tools.go
+++ b/tools.go
@@ -6,5 +6,6 @@ import (
 	_ "github.com/99designs/gqlgen"
 	_ "github.com/cheekybits/genny"
 	_ "github.com/praetorian-inc/gokart"
+	_ "github.com/selesy/gokart-pre"
 	_ "golang.org/x/vuln/cmd/govulncheck"
 )


Test patch: