Go S8566 should not be triggered if go.mod has no dependencies
I have some Go projects with no dependencies. As a result, no go.sum file is generated. However, new beta rule S8566 states that "Go dependency lock file should be committed to source control". This new rule should be ignored if go.mod has no dependencies.
Log in to comment and vote
Comments1
Jun 1