On Fri, 18 Oct 2024 at 08:20, Kurtis Rader <kra...@skepticism.us> wrote:
> And, obviously, how do you handle a command named "goimports" installed by > the user that is not from the golang.org/x/tools repository. > I'll note that it should be trivial to check if the BuildInfo.Main.Path is golang.org/x/tools and BuildInfo.Path is golang.org/x/tools/cmd/goimports. Obviously, it's possible that a user has a carefully crafted binary that contains lying build information in the corresponding ELF sections. But let's not have the perfect be the enemy of the good enough. -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/CAEkBMfF7M-2-akSiUzr5sjskrCxeB%2BTt8j9mv8CiokiGyCraVw%40mail.gmail.com.
