✨ 🐛 Reading Go Runtime Details from GOENV (#17)

* ✨ Reading Go Runtime Infos

To avoid reading the runtime information of the compiled code vs the real one used by govulncheck

* ♻️ Streamlined Function

* ✅ Added test

main.go

@@ -2,8 +2,8 @@ package main
 
 import (
 	"os"
-	"runtime"
 
+	"github.com/Templum/govulncheck-action/pkg/action"
 	"github.com/Templum/govulncheck-action/pkg/github"
 	"github.com/Templum/govulncheck-action/pkg/sarif"
 	"github.com/Templum/govulncheck-action/pkg/vulncheck"
@@ -33,10 +33,12 @@ func main() {
 		logger.Debug().Msg("Enabled Local Development mode, scanner will return static result based on found.json")
 	}
 
+	info := action.ReadRuntimeInfoFromEnv()
+
 	logger.Info().
-		Str("Go-Version", runtime.Version()).
-		Str("Go-Os", runtime.GOOS).
-		Str("Go-Arch", runtime.GOARCH).
+		Str("Go-Version", info.Version).
+		Str("Go-Os", info.Os).
+		Str("Go-Arch", info.Arch).
 		Msg("GoEnvironment Details:")
 
 	logger.Debug().

pkg/action/env.go

@@ -0,0 +1,43 @@
+package action
+
+import (
+	"os/exec"
+	"strings"
+)
+
+type RuntimeInfos struct {
+	Version string
+	Os      string
+	Arch    string
+}
+
+// ReadRuntimeInfoFromEnv using go env this ensures the real information are used and no compile time versions
+func ReadRuntimeInfoFromEnv() *RuntimeInfos {
+	cmd := exec.Command("go", "env")
+	out, _ := cmd.Output()
+
+	info := RuntimeInfos{Version: "Unknown", Os: "Unknown", Arch: "Unknown"}
+
+	envs := strings.Split(string(out), "\n")
+
+	for _, env := range envs {
+
+		if strings.Contains(env, "GOARCH") {
+			keyVal := strings.SplitAfter(env, "=")
+			info.Arch = strings.Trim(keyVal[1], "\"")
+		}
+
+		if strings.Contains(env, "GOVERSION") {
+			keyVal := strings.SplitAfter(env, "=")
+			info.Version = strings.Trim(keyVal[1], "\"")
+		}
+
+		if strings.Contains(env, "GOOS") {
+			keyVal := strings.SplitAfter(env, "=")
+			info.Os = strings.Trim(keyVal[1], "\"")
+		}
+
+	}
+
+	return &info
+}

pkg/action/env_test.go

@@ -0,0 +1,20 @@
+package action
+
+import (
+	"runtime"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestReadRuntimeInfoFromEnv(t *testing.T) {
+	t.Run("should go runtime information from go env", func(t *testing.T) {
+		info := ReadRuntimeInfoFromEnv()
+
+		assert.NotNil(t, info, "should not return nil")
+
+		assert.Equal(t, runtime.Version(), info.Version)
+		assert.Equal(t, runtime.GOOS, info.Os)
+		assert.Equal(t, runtime.GOARCH, info.Arch)
+	})
+}