ignore go.sum by default

[georgettica]

in the same way https://github.com/sharkdp/fd has a --no-ignore or --hidden flags, we should automatically not search go.sum for typos (as it's generated I think)

[epage]

This is effectively a lock file, yes?

If we add it to our "lock" file type, we'll then stop checking the file

[epage]

Mind taking a look at #459 to see if the description and actions taken line up with a go users expectations?

[georgettica]

This looks great, thank you!

[epage]

This should now be available in v1.6.0

[georgettica]

Testing soon

[georgettica]

it works!
glad this was merged :)

[georgettica]

@epage found this works great but I now have an issue in go.mod
this shows the imports that can be done, and sometimes we use a hash to describe a version..

this is less obvious to fix as we need to ignore the version from scanning

module example.com

go 1.18

require (
        foo.com/pkg somebadhash
)

we need to ignore the somebadhash in go.mod

---

feel free to suggest I open another issue for this. I just though it's worth discussion here before sprouting another issue

[epage]

Unless we do something special go.mod, this falls under #415 which we've not had a good solution for yet.

[georgettica]

Thank you! I didn't see this issue and will follow up there