#!/usr/bin/make -f # Ship only the parts that build against packaged dependencies. # # cmd/, cvefeed/, providers/, vulndb/ and stats/ import # github.com/facebookincubator/flog and github.com/dgrijalva/jwt-go/v4, neither # of which is in Debian. jwt-go in particular is the abandoned predecessor of # golang-jwt and carries known vulnerabilities, so packaging it is not # desirable. Upstream has been archived read-only since January 2024, so these # are not going to move. # # The reverse dependency this package exists for, syft, imports only # nvdtools/wfn. See debian/README.source. export DH_GOLANG_EXCLUDES := cmd cvefeed providers vulndb stats %: dh $@ --builddirectory=debian/_build --buildsystem=golang --with=golang