deps: remove fanal framework, call Trivy parsers directly#2476

Merged

kotakanbe merged 42 commits intomasterfrom

diet-trivy-dispatch

Mar 27, 2026

Commits on Mar 23, 2026

test: add golden tests for AnalyzeLibrary

authored and
shino
committed
refactor: extract file-to-parser dispatch function

authored and
shino
committed
deps: remove fanal framework, call Trivy parsers directly

authored and
shino
committed
style: fix goimports formatting and go mod tidy

authored and
shino
committed
test: address Copilot review on golden tests

authored and
shino
committed
test: copy text fixtures to testdata for CI compatibility

authored and
shino
committed
test: force-add requirements.txt ignored by *.txt gitignore

authored and
shino
committed
fix: address Copilot review on PR #2476

authored and
shino
committed
fix: address Copilot review round 2 on PR #2476

authored and
shino
committed
fix: address Copilot review round 3

kotakanbe
authored and
shino
committed
test: add diff-lockfile for A/B regression testing

kotakanbe
authored and
shino
committed
chore: gitignore compare-lockfile binary

kotakanbe
authored and
shino
committed
docs: add scripts/README.md for diff-lockfile usage

kotakanbe
authored and
shino
committed
fix: address Copilot review round 4 on PR #2476

kotakanbe
authored and
shino
committed
fix: update fixtures to non-zero libs and fix docs

kotakanbe
authored and
shino
committed
fix: surface all filesystem errors in compare-lockfile

kotakanbe
authored and
shino
committed
fix: add complete sort tie-breakers and harden error handling

authored and
shino
committed
fix: sort imports per gofmt and sanitize worktree path

authored and
shino
committed
fix: use MkdirTemp for worktree and handle result-counting errors

authored and
shino
committed
fix: check os.Remove and worktree cleanup errors

kotakanbe
authored and
shino
committed
fix: use abspath instead of trivypath in error messages

kotakanbe
authored and
shino
committed
docs: use workdir-relative path in README instead of hardcoded /tmp

kotakanbe
authored and
shino
committed
fix: address remaining code quality issues

kotakanbe
authored and
shino
committed
fix: fix result map key and add diff fallback

kotakanbe
authored and
shino
committed
fix: comprehensive code quality sweep

kotakanbe
authored and
shino
committed
fix: add ComposerVendor dispatch and complete test coverage

kotakanbe
authored and
shino
committed
fix: add ComposerVendor dispatch, fix lint, use request context

kotakanbe
authored and
shino
committed
fix: make diff-lockfile fetch optional via FETCH variable

kotakanbe
authored and
shino
committed
docs: fix README wording to match actual script behavior

kotakanbe
authored and
shino
committed
fix: detect .exe and exclude non-regular files in isExecutable

kotakanbe
authored and
shino
committed
fix: address review feedback (rename, typo, comments, unused arg)

kotakanbe
authored and
shino
committed
docs: add security rationale for not using submodules in CI

kotakanbe
authored and
shino
committed
test: expand diff-lockfile to 129 fixtures, remove unused jar method

kotakanbe
authored and
shino
committed
chore: add /compare-lockfile binary to .gitignore

authored and
shino
committed
style: fix goimports alignment in dispatch_test.go

kotakanbe
authored and
shino
committed
fix: check IsRegular before .exe in isExecutable

kotakanbe
authored and
shino
committed
docs: update fixture count in scripts/README.md (17 → 129)
kotakanbe
committed
test: compare lib count instead of byte length in pom online test
kotakanbe
committed
fix: unmarshal golden JSON as slice in PomOnline test
kotakanbe
committed

Commits on Mar 24, 2026

Merge branch 'master' into diet-trivy-dispatch
kotakanbe
authored

Commits on Mar 27, 2026