snyk 1.1053.0 → 1.1055.0

package/dist/cli/263.index.js

@@ -140362,7 +140362,12 @@ async function pullWithDockerBinary(docker, targetImage, saveLocation, username,
             err.stderr.includes("operating system is not supported")) {
             throw new Error(`Operating system is not supported`);
         }
-        if (err.stderr && err.stderr.includes("no matching manifest for")) {
+        const unknownManifestConditions = [
+            "no matching manifest for",
+            "manifest unknown",
+        ];
+        if (err.stderr &&
+            unknownManifestConditions.some((value) => err.stderr.includes(value))) {
             if (platform) {
                 throw new Error(`The image does not exist for ${platform}`);
             }
@@ -142709,8 +142714,17 @@ function extractModuleInformation(binary) {
     if (!mod) {
         throw Error("binary contains empty module info");
     }
-    const [, mainModuleLine, ...versionsLines] = mod.split("\n");
-    const [, name] = mainModuleLine.split("\t");
+    const [pathDirective, mainModuleLine, ...versionsLines] = mod.split("\n");
+    const lineSplit = mainModuleLine.split("\t");
+    let name = lineSplit[1];
+    if (lineSplit[0] !== "mod") {
+        // If the binary has no mod directive, it is a binary from the Go
+        // distribution, like the "go" command, "vet", "gofmt" or others. In that
+        // case, we use "go-distribution@" plus the path directive ("cmd/vet" for
+        // example) as the name.  Using the "@" ensures that customers cannot create
+        // name-clashes with these as "@" is an invalid character in Go modules.
+        name = "go-distribution@" + pathDirective.split("\t")[1];
+    }
     const modules = [];
     versionsLines.forEach((versionLine) => {
         const [, name, ver] = versionLine.split("\t");