XRAY-160044 - Skip for local Go 'replace' modules

[Phavya-jfrog]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

jf curation-audit HEAD-probes every Go module in the dependency tree against Artifactory. When a module is satisfied by a local replace directive, Go reports it under its original name/placeholder version with no "local" signal - so it still gets probed, 404s, and flags the whole report as "may be incomplete."

Now parses go.mod's replace table directly to detect local-directory replaces and skips probing them.

Before

After

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: d202ae87-3e2d-4907-bc8f-6595be51e749

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[gauriy-tech]

[Re: go.mod:150] golang.org/x/mod/modfile is now imported directly in sca/bom/buildinfo/technologies/go/golang.go, but go.mod still marks golang.org/x/mod as // indirect. Running go mod tidy would promote it to a direct dependency. Cosmetic only — doesn't affect build or CI (no go mod tidy --check gate in this repo's workflows).

---

Review generated by xray-pr-review

[github-actions]

---

🐸 JFrog Frogbot