fix: Set GOEXPERIMENT environment variable

The current Trivy library depends on experimental go modules that require this flag.

Author: afsmeira

.circleci/config.yml

@@ -26,6 +26,7 @@ workflows:
       - codacy/shell:
           name: generate_and_test
           cmd: |
+            go env -w GOEXPERIMENT=jsonv2
             go generate ./...
             go test ./...
           requires:

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.24-alpine as builder
+FROM golang:1.25-alpine as builder
 
 ARG TRIVY_VERSION=dev
 ENV TRIVY_VERSION=$TRIVY_VERSION
@@ -8,6 +8,7 @@ WORKDIR /src
 COPY go.mod go.mod
 COPY go.sum go.sum
 
+RUN go env -w GOEXPERIMENT=jsonv2
 RUN --mount=type=cache,target=/go/pkg/mod \
     go mod download
 RUN go mod verify

README.md

@@ -2,6 +2,9 @@
 
 This is the docker engine we use at Codacy to have [Trivy](https://github.com/aquasecurity/trivy) support.
 
+> [!IMPORTANT]
+> For local development, please run `go env -w GOEXPERIMENT=jsonv2`, since the current Trivy library depends on experimental go modules.
+
 ## Usage
 
 You can create the docker by doing:

go.sum

@@ -78,7 +78,6 @@ github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0/go.mod h1:HKpQ
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/toml v1.5.0 h1:W5quZX/G/csjUnuI8SUYlsHs9M38FC7znL0lIO+DvMg=
 github.com/BurntSushi/toml v1.5.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
-github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/CycloneDX/cyclonedx-go v0.9.3 h1:Pyk/lwavPz7AaZNvugKFkdWOm93MzaIyWmBwmBo3aUI=
 github.com/CycloneDX/cyclonedx-go v0.9.3/go.mod h1:vcK6pKgO1WanCdd61qx4bFnSsDJQ6SbM2ZuMIgq86Jg=
 github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU=