search
HomeBackend DevelopmentGolangWhat does the arrow symbol '=>' in the output of go version -m mean?

go version -m 输出中的箭头符号“=>

php editor Strawberry is here to answer a question about the Go language: When running the `go version -m` command, the arrow in the output What does the symbol "=>" mean? This symbol is actually used to indicate package dependencies. When we use `go mod` for package management, arrow symbols will show the dependencies between modules, indicating that one module depends on another module. Through this symbol, we can clearly understand the relationship between each module, which facilitates package management and debugging.

Question content

I am parsing the CVEs identified by various scanners in my project, and one of the CVEs is associated with a version of a golang dependency.

When I run go version -m ./binaryfile the dependencies marked as vulnerable have this arrow symbol next to them => but I can't find it Document its meaning anywhere.

Full output is included below...

$ go version -m /root/github.com/alexei-led/pumba/.bin/github.com/alexei-led/pumba
/root/github.com/alexei-led/pumba/.bin/github.com/alexei-led/pumba: go1.19.4
        path    command-line-arguments
        dep     github.com/alexei-led/pumba     (devel)
        dep     github.com/cpuguy83/go-md2man/v2        v2.0.0-20190314233015-f79a8a8ca69d      h1:u+s90utsygptzmwqh2arr3luazljia+pg3kc1ylsyvy=
        dep     github.com/davecgh/go-spew      v1.1.1  h1:vj9j/u1bqnvcefjowuhtloarqs3+rkhyy13jywtu97c=
        dep     github.com/docker/distribution  v2.7.1+incompatible     h1:a5mlkvzth6w5a4foss3d2eo5bumsjpcb+crllu7csug=
        dep     github.com/docker/docker        v1.13.1
        =>      github.com/docker/engine        v17.12.0-ce-rc1.0.20190717161051-705d9623b7c1+incompatible      h1:4pnn+rsurveibbmqlrtzh77hlmip4naaqrhook4apj8=

        dep     github.com/docker/go-connections        v0.4.0  h1:el9xviselrb7bufusrzozjnkim5ynzcvinkohafqrjq=
        dep     github.com/docker/go-units      v0.4.0  h1:3uh0pgvws3nia0q+mwdc8yjepf9zjrfzzwxzydct3tw=
        dep     github.com/gogo/protobuf        v1.3.2  h1:ov1cvc58uf3b5xjbnzv7+opctcqfzebyjwzi34vdm4q=
        dep     github.com/golang/protobuf      v1.4.3  h1:jjczwpvbqxdqfvmtfywevtmiyrl/npdpschpj0t/ram=
        dep     github.com/johntdyer/slack-go   v0.0.0-20180213144715-95fac1160b22      h1:jkup9tq0c7x3w6+ipymit07re42mttwnd77sn2chngq=
        dep     github.com/johntdyer/slackrus   v0.0.0-20180518184837-f7aae3243a07      h1:+kbg/8rjca6vxjzbujaie4mqmbebyc8nleb51frnvby=
        dep     github.com/opencontainers/go-digest     v1.0.0  h1:apouws51w5plhuygyz9fceebiouda/6nw8oi/yohh5u=
        dep     github.com/opencontainers/image-spec    v1.0.1  h1:jmemwkrwhx4zj+fvxwomcfm/8syggruvojfa6h/trci=
        dep     github.com/pkg/errors   v0.9.1  h1:feblx1zs214owpjy7qsbeixburkuhqawrk5uwlgtwt4=
        dep     github.com/pmezard/go-difflib   v1.0.0  h1:4dbwde0ngyqobhblqypwsupocmwr5bezik/f1lzbaqm=
        dep     github.com/russross/blackfriday/v2      v2.0.1  h1:lpqvate+huhnfhj/0lc98eswrz8afy9tm/0rk8m9o+q=
        dep     github.com/shurcool/sanitized_anchor_name       v1.0.0  h1:pdmoco6wvbs+7yrjymort4/bmy5iyyjws/koiwx8mho=
        dep     github.com/sirupsen/logrus      v1.7.0  h1:shrd1u9pzb12tx0cvy0dtepoch97k8etx+mg7zarutm=
        dep     github.com/stretchr/objx        v0.1.0  h1:4g4v2do3vzwixgiroq5lfboy6nuhcyyzaqniapphys4=
        dep     github.com/stretchr/testify     v1.6.1  h1:hdpohmpopp40lsulcqw7irrb/u7w6rpdc9399xyond0=
        dep     github.com/urfave/cli   v1.22.4 h1:u7tspnppswafymm8iehjhy4ujmluuu/gmqskvj1inxa=
        dep     golang.org/x/net        v0.0.0-20210917163549-3c21e5b27794      h1:poargvjk+mphife37zcmbwoljplramlkmvggjvlkyl8=
        dep     golang.org/x/sync       v0.0.0-20201020160332-67f06af15bc9      h1:sqfwasi55ru7vdns9yr0z324vnlrf+0wmqrxt4st8ck=
        dep     golang.org/x/sys        v0.0.0-20210616094352-59db8d763f22      h1:rqytpxgr1ivnx7psjb3ff8y7snfinvfvkx1c8sjbkio=
        dep     google.golang.org/genproto      v0.0.0-20200526211855-cb27e3aa2013      h1:+kghl1aib/qcwari1cbqbz1rk19r85mnuf8habghugy=
        dep     google.golang.org/grpc  v1.40.0 h1:agj0ih4mhjseibykfgh1dd9kj/eotz93i6hohhukq5q=
        dep     google.golang.org/protobuf      v1.25.0 h1:ejskq+sypohkw+1uil0jjmtmhcgjpj/qwtxr8qp+r4c=
        dep     gopkg.in/yaml.v3        v3.0.0-20200313102051-9f266ea9e77c      h1:duuwhk2qeco/6vqa44rthz8ie2qxmnekrthcny2nxvo=
        build   -compiler=gc
        build   -ldflags="-x main.version=0.8.0 -x main.gitcommit=0413655 -x main.gitbranch=head -x main.buildtime=2022-12-29t09:34:48-0500 "
        build   -tags=release
        build   cgo_enabled=0
        build   goarch=amd64
        build   goos=linux
        build   goamd64=v1

...The line of interest is:

=>      github.com/docker/engine        v17.12.0-ce-rc1.0.20190717161051-705d9623b7c1+incompatible      h1:4Pnn+RsurVEiBbmqlRtzh77HLMiP4NaaqRHOOK4aPj8=

Solution

=> means using the replace directive to build the executable binary.

The previous line is also very important, that is the replaced module:

dep     github.com/docker/docker        v1.13.1
    =>      github.com/docker/engine        v17.12.0-ce-rc1.0.20190717161051-705d9623b7c1+incompatible      h1:4pnn+rsurveibbmqlrtzh77hlmip4naaqrhook4apj8=

This means github.com/docker/docker v1.13.1 was replaced by github.com/docker/engine v17.12.0-... during the build process.

Example replace directive from go.mod file:

replace golang.org/x/net v1.2.3 => example.com/fork/net v1.4.5

This is the source of => text. Think of it as the referenced golang.org/x/net package "points" to example.com/fork/net (this is what is actually used ).

The above is the detailed content of What does the arrow symbol '=>' in the output of go version -m mean?. For more information, please follow other related articles on the PHP Chinese website!

Statement
This article is reproduced at:stackoverflow. If there is any infringement, please contact admin@php.cn delete
How to use the 'strings' package to manipulate strings in Go step by stepHow to use the 'strings' package to manipulate strings in Go step by stepMay 13, 2025 am 12:12 AM

Go's strings package provides a variety of string manipulation functions. 1) Use strings.Contains to check substrings. 2) Use strings.Split to split the string into substring slices. 3) Merge strings through strings.Join. 4) Use strings.TrimSpace or strings.Trim to remove blanks or specified characters at the beginning and end of a string. 5) Replace all specified substrings with strings.ReplaceAll. 6) Use strings.HasPrefix or strings.HasSuffix to check the prefix or suffix of the string.

Go strings package: how to improve my code?Go strings package: how to improve my code?May 13, 2025 am 12:10 AM

Using the Go language strings package can improve code quality. 1) Use strings.Join() to elegantly connect string arrays to avoid performance overhead. 2) Combine strings.Split() and strings.Contains() to process text and pay attention to case sensitivity issues. 3) Avoid abuse of strings.Replace() and consider using regular expressions for a large number of substitutions. 4) Use strings.Builder to improve the performance of frequently splicing strings.

What are the most useful functions in the GO bytes package?What are the most useful functions in the GO bytes package?May 13, 2025 am 12:09 AM

Go's bytes package provides a variety of practical functions to handle byte slicing. 1.bytes.Contains is used to check whether the byte slice contains a specific sequence. 2.bytes.Split is used to split byte slices into smallerpieces. 3.bytes.Join is used to concatenate multiple byte slices into one. 4.bytes.TrimSpace is used to remove the front and back blanks of byte slices. 5.bytes.Equal is used to compare whether two byte slices are equal. 6.bytes.Index is used to find the starting index of sub-slices in largerslices.

Mastering Binary Data Handling with Go's 'encoding/binary' Package: A Comprehensive GuideMastering Binary Data Handling with Go's 'encoding/binary' Package: A Comprehensive GuideMay 13, 2025 am 12:07 AM

Theencoding/binarypackageinGoisessentialbecauseitprovidesastandardizedwaytoreadandwritebinarydata,ensuringcross-platformcompatibilityandhandlingdifferentendianness.ItoffersfunctionslikeRead,Write,ReadUvarint,andWriteUvarintforprecisecontroloverbinary

Go 'bytes' package quick referenceGo 'bytes' package quick referenceMay 13, 2025 am 12:03 AM

ThebytespackageinGoiscrucialforhandlingbyteslicesandbuffers,offeringtoolsforefficientmemorymanagementanddatamanipulation.1)Itprovidesfunctionalitieslikecreatingbuffers,comparingslices,andsearching/replacingwithinslices.2)Forlargedatasets,usingbytes.N

Mastering Go Strings: A Deep Dive into the 'strings' PackageMastering Go Strings: A Deep Dive into the 'strings' PackageMay 12, 2025 am 12:05 AM

You should care about the "strings" package in Go because it provides tools for handling text data, splicing from basic strings to advanced regular expression matching. 1) The "strings" package provides efficient string operations, such as Join functions used to splice strings to avoid performance problems. 2) It contains advanced functions, such as the ContainsAny function, to check whether a string contains a specific character set. 3) The Replace function is used to replace substrings in a string, and attention should be paid to the replacement order and case sensitivity. 4) The Split function can split strings according to the separator and is often used for regular expression processing. 5) Performance needs to be considered when using, such as

'encoding/binary' Package in Go: Your Go-To for Binary Operations'encoding/binary' Package in Go: Your Go-To for Binary OperationsMay 12, 2025 am 12:03 AM

The"encoding/binary"packageinGoisessentialforhandlingbinarydata,offeringtoolsforreadingandwritingbinarydataefficiently.1)Itsupportsbothlittle-endianandbig-endianbyteorders,crucialforcross-systemcompatibility.2)Thepackageallowsworkingwithcus

Go Byte Slice Manipulation Tutorial: Mastering the 'bytes' PackageGo Byte Slice Manipulation Tutorial: Mastering the 'bytes' PackageMay 12, 2025 am 12:02 AM

Mastering the bytes package in Go can help improve the efficiency and elegance of your code. 1) The bytes package is crucial for parsing binary data, processing network protocols, and memory management. 2) Use bytes.Buffer to gradually build byte slices. 3) The bytes package provides the functions of searching, replacing and segmenting byte slices. 4) The bytes.Reader type is suitable for reading data from byte slices, especially in I/O operations. 5) The bytes package works in collaboration with Go's garbage collector, improving the efficiency of big data processing.

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Dreamweaver Mac version

Dreamweaver Mac version

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

EditPlus Chinese cracked version

EditPlus Chinese cracked version

Small size, syntax highlighting, does not support code prompt function

MinGW - Minimalist GNU for Windows

MinGW - Minimalist GNU for Windows

This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

SecLists

SecLists

SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.