diff --git a/scripts/docker/install-golang-deps.sh b/scripts/docker/install-golang-deps.sh index 6661129ed..7d255b6b2 100755 --- a/scripts/docker/install-golang-deps.sh +++ b/scripts/docker/install-golang-deps.sh @@ -7,7 +7,9 @@ CURRENT_DIR=$PWD; # Install scc SCC_DIR="$HOME/scc" echo "Cloning Sloc Cloc and Code (SCC) to generate value data ..." -git clone https://github.com/boyter/scc "$SCC_DIR" +# this needs to be done from source. the latest version doesnt seem to exist on the package repo +# however, the latest version (v3.5.0) requires bumping the golang version in the Dockerfile +git clone --depth 1 --branch v3.4.0 https://github.com/boyter/scc "$SCC_DIR" cd $SCC_DIR go build; echo "scc build done" @@ -17,7 +19,8 @@ cd $CURRENT_DIR # Install scorecard SCORECARD_DIR="$HOME/scorecard" echo "Cloning OSSF Scorecard to generate scorecard data ..." -git clone https://github.com/ossf/scorecard $SCORECARD_DIR +# lock version to prevent future issues if the golang version is bumped +git clone --depth 1 --branch v5.1.1 https://github.com/ossf/scorecard $SCORECARD_DIR cd $SCORECARD_DIR go build; echo "scorecard build done"