Install gosec from vendor and pin to 1.3.0 (jaegertracing#1502)

Signed-off-by: Yuri Shkuro <ys@uber.com>
ohdearaugustin · Apr 26, 2019 · 76c0164 · 76c0164
1 parent f86da0a
commit 76c0164
Show file tree

Hide file tree

Showing 3 changed files with 70 additions and 14 deletions.
diff --git a/Gopkg.lock b/Gopkg.lock
diff --git a/Gopkg.toml b/Gopkg.toml
@@ -25,12 +25,17 @@
 #   unused-packages = true
 
 required = [
+    "github.com/securego/gosec/cmd/gosec",
     "github.com/golang/protobuf/protoc-gen-go",
     "github.com/gogo/protobuf/protoc-gen-gogo",
     "github.com/grpc-ecosystem/grpc-gateway/protoc-gen-grpc-gateway",
     "github.com/grpc-ecosystem/grpc-gateway/protoc-gen-swagger"
 ]
 
+[[constraint]]
+  name = "github.com/securego/gosec"
+  version = "1.3.0"
+
 [[constraint]]
   name = "github.com/apache/thrift"
   version = "=0.9.3"
@@ -124,15 +129,12 @@ required = [
   unused-packages = true
   [[prune.project]]
     name = "github.com/gogo/protobuf"
-    non-go = false
     unused-packages = false
   [[prune.project]]
     name = "github.com/grpc-ecosystem/grpc-gateway"
-    non-go = false
     unused-packages = false
   [[prune.project]]
       name = "github.com/gogo/googleapis"
-      non-go = false
       unused-packages = false
 
 [[constraint]]

diff --git a/Makefile b/Makefile
@@ -275,9 +275,9 @@ install-tools:
 	go get -u golang.org/x/tools/cmd/cover
 	go get -u golang.org/x/lint/golint
 	go get -u github.com/sectioneight/md-to-godoc
-	go get -u github.com/securego/gosec/cmd/gosec/...
 	go get -u honnef.co/go/tools/cmd/gosimple
 	go get -u github.com/mjibson/esc
+	go install ./vendor/github.com/securego/gosec/cmd/gosec/
 
 .PHONY: install-ci
 install-ci: install install-tools