Go S8566 should not be triggered if go.mod has no dependencies

I have some Go projects with no dependencies. As a result, no go.sum file is generated. However, new beta rule S8566 states that "Go dependency lock file should be committed to source control". This new rule should be ignored if go.mod has no dependencies.

Please authenticate to join the conversation.

Upvoters
Status

Closed

Board
๐Ÿ› ๏ธ

Bug Reports

Date

22 days ago

Author

Rob Spoor

Subscribe to post

Get notified by email when there are changes.