nancy: Panics with index out of range error

Thanks for creating an issue! Please fill out this form so we can be sure to have all the information we need, and to minimize back and forth.

What are you trying to do?

$ git clone git@github.com:ory/kratos.git
$ cd kratos
$ git checkout -b nancy 9ea96120451cf93be42c87146dcb9db02c67631d
$ go list -m all | nancy sleuth -q
Error: runtime error: index out of range [4] with length 4

[... rest of help message ...]

Anything else?

cc @bhamail / @DarthHater

About this issue

Original URL
State: closed
Created 4 years ago
Comments: 18 (9 by maintainers)

Most upvoted comments

Also another question on this… this is one of the rewrites you have in there.

github.com/ory/kratos-client-go v0.5.4-alpha.1 => ./internal/httpclient

Should nancy a.) Just ignore it since you said rewrite it to this internal thing b.) Still let you know about any issues on the thing on the left side of the =>

My gut says scan cause security ¯_(ツ)_/¯ but maybe that doesn’t make any sense.

zendern on Mar 10, 2021

So I started to take a look at this tonight @aeneasr I think we can fix the panic but honestly i think there might a simpler fix. The README has been updated i think back when 1.0.0 was released to officially suggest that you run go list -json -m all b/c the output is much nicer for the machines to understand 😃

You can see I ran both with and without. Without it panics like reported and with -json it does what its supposed to.

If you can’t easily switch what you are running I understand and still plan on looking at the panic but just wanted to throw that out there as an option.

zendern on Mar 10, 2021

Just wanted to circle back and see if there’s anything I can do to help. If it is implementation, I would need some pointers 😃

aeneasr on Mar 7, 2021