)]}'
{
  "commit": "bed45cb23baae8a9b7f67f24532937dde37d2a60",
  "tree": "0b64d6fc7e334d9b4ef20d6fcacc8317dc27f63c",
  "parents": [
    "74772da54f2bf6493b297fec0a5a24d814cf172f"
  ],
  "author": {
    "name": "Miri Amarilio",
    "email": "mirilio@google.com",
    "time": "Sat Oct 17 22:24:40 2026 +0000"
  },
  "committer": {
    "name": "Miri Amarilio",
    "email": "mirilio@google.com",
    "time": "Sat Oct 17 22:24:40 2026 +0000"
  },
  "message": "M121: docker: rename vendor.mod to go.mod for OSV scanning\n\nGrep-on-Borg\u0027s OpenSourceMetadataSignal and OSV-Scalibr only discover Go\nmodule dependencies from files named go.mod. On cos/release-R121, upstream Moby\nstores its Go module manifest as vendor.mod (and vendor.sum), causing\nthird_party/docker to be skipped by the Go dependency CVE scanner.\n\nRename vendor.mod and vendor.sum to go.mod and go.sum and update the\nhelper scripts in hack/ to use go.mod directly while keeping\nhack/with-go-mod.sh\u0027s GO111MODULE\u003don wrapper for the ebuild build.\n\nBUG\u003db/536013518\nTEST\u003d./hack/vendor.sh vendor \u0026\u0026 GO111MODULE\u003doff ./hack/with-go-mod.sh go list -mod\u003dvendor ./cmd/dockerd ./cmd/docker-proxy\nRELEASE_NOTE\u003dNone\n\ncos-patch: bug\nChange-Id: I5ac2be91634ccd5365cb7086f415578c22ab9ecc\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4f1544141aec7a078a3dbcbefcd294b46ae41dcf",
      "old_mode": 33188,
      "old_path": ".gitattributes",
      "new_id": "9dd7ef0727b3c92a868e2774434107a14bfb8b95",
      "new_mode": 33188,
      "new_path": ".gitattributes"
    },
    {
      "type": "rename",
      "old_id": "2f2cd1da057b5d7a6af7af2d546c978c4b670700",
      "old_mode": 33188,
      "old_path": "vendor.mod",
      "new_id": "722852518162da40e7e21c1e40d38c839f1844e8",
      "new_mode": 33188,
      "new_path": "go.mod",
      "score": 97
    },
    {
      "type": "rename",
      "old_id": "aa7e6a6f5c2f949e7b11ba0e0c50be66b783effa",
      "old_mode": 33188,
      "old_path": "vendor.sum",
      "new_id": "aa7e6a6f5c2f949e7b11ba0e0c50be66b783effa",
      "new_mode": 33188,
      "new_path": "go.sum",
      "score": 100
    },
    {
      "type": "modify",
      "old_id": "280bb0e25c1180e14fda707e79e1ddde161efee1",
      "old_mode": 33261,
      "old_path": "hack/buildkit-ref",
      "new_id": "c57e99366a8fb32d7e4c039ef1920d33bdf828a3",
      "new_mode": 33261,
      "new_path": "hack/buildkit-ref"
    },
    {
      "type": "modify",
      "old_id": "6e99dc4b148a1e84343aa936addb216c81884586",
      "old_mode": 33188,
      "old_path": "hack/dockerfiles/generate-files.Dockerfile",
      "new_id": "b7ac48f22ee9641a37d9907e664e8ed66d2af751",
      "new_mode": 33188,
      "new_path": "hack/dockerfiles/generate-files.Dockerfile"
    },
    {
      "type": "modify",
      "old_id": "444624b0f2e1a3f73a646c394d38bc9121e51bf1",
      "old_mode": 33188,
      "old_path": "hack/dockerfiles/govulncheck.Dockerfile",
      "new_id": "fb667c26420afa05f23f5822d3cf349f52da7f93",
      "new_mode": 33188,
      "new_path": "hack/dockerfiles/govulncheck.Dockerfile"
    },
    {
      "type": "modify",
      "old_id": "37c73d9390d2a4803cb7b399b00cb166aac9bbb1",
      "old_mode": 33188,
      "old_path": "hack/make/.binary",
      "new_id": "17c5dbe70780921a09549150f220bcfc61f75f25",
      "new_mode": 33188,
      "new_path": "hack/make/.binary"
    },
    {
      "type": "delete",
      "old_id": "917cc3e756fbde99d9f2487c6c8f39f031b0168c",
      "old_mode": 33261,
      "old_path": "hack/validate/no-module",
      "new_id": "0000000000000000000000000000000000000000",
      "new_mode": 0,
      "new_path": "/dev/null"
    },
    {
      "type": "modify",
      "old_id": "a0b35d3f25359df14c8c192b6213120c913cf3e7",
      "old_mode": 33261,
      "old_path": "hack/validate/vendor",
      "new_id": "a7a3abf12cfb032f5bfc010a9626fed4da2eb87d",
      "new_mode": 33261,
      "new_path": "hack/validate/vendor"
    },
    {
      "type": "modify",
      "old_id": "deaf74b51ba7e94b35f5e2a3ec2f0201a9e94858",
      "old_mode": 33261,
      "old_path": "hack/vendor.sh",
      "new_id": "b072cf7b051ff12eda843e01ea87e33f72beca8e",
      "new_mode": 33261,
      "new_path": "hack/vendor.sh"
    },
    {
      "type": "modify",
      "old_id": "50713992ecd141d42e8f2ac5bd2aeff9a7a6ae56",
      "old_mode": 33261,
      "old_path": "hack/with-go-mod.sh",
      "new_id": "1367651164e7fb637a67916ad28d669ae8c16df1",
      "new_mode": 33261,
      "new_path": "hack/with-go-mod.sh"
    }
  ]
}