Skip to main content

Go S8566 should not be triggered if go.mod has no dependencies

I have some Go projects with no dependencies. As a result, no go.sum file is generated. However, new beta rule S8566 states that "Go dependency lock file should be committed to source control". This new rule should be ignored if go.mod has no dependencies.

Status: Closed1 comment

Log in to comment and vote

Comments1

  • Conrado Franceschi changed status to Closed
    •

    Jun 1