🌱 v3 upgrade changes (#1118)

v3 go.mod changes

checker/check_request.go

@@ -17,7 +17,7 @@ package checker
 import (
 	"context"
 
-	"github.com/ossf/scorecard/v2/clients"
+	"github.com/ossf/scorecard/v3/clients"
 )
 
 // CheckRequest struct encapsulates all data to be passed into a CheckFn.

checker/check_runner.go

@@ -23,8 +23,8 @@ import (
 	opencensusstats "go.opencensus.io/stats"
 	"go.opencensus.io/tag"
 
-	sce "github.com/ossf/scorecard/v2/errors"
-	"github.com/ossf/scorecard/v2/stats"
+	sce "github.com/ossf/scorecard/v3/errors"
+	"github.com/ossf/scorecard/v3/stats"
 )
 
 const checkRetries = 3

checks/all_checks.go

@@ -15,7 +15,7 @@
 // Package checks defines all Scorecard checks.
 package checks
 
-import "github.com/ossf/scorecard/v2/checker"
+import "github.com/ossf/scorecard/v3/checker"
 
 // AllChecks is the list of all security checks that will be run.
 var AllChecks = checker.CheckNameToFnMap{}

checks/binary_artifact.go

@@ -22,8 +22,8 @@ import (
 	"github.com/h2non/filetype"
 	"github.com/h2non/filetype/types"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckBinaryArtifacts is the exported name for Binary-Artifacts check.

checks/branch_protection.go

@@ -19,9 +19,9 @@ import (
 	"fmt"
 	"regexp"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

checks/branch_protection_test.go

@@ -19,11 +19,11 @@ import (
 
 	"github.com/golang/mock/gomock"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	"github.com/ossf/scorecard/v2/clients/mockrepo"
-	sce "github.com/ossf/scorecard/v2/errors"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	"github.com/ossf/scorecard/v3/clients/mockrepo"
+	sce "github.com/ossf/scorecard/v3/errors"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 func getBranch(branches []*clients.BranchRef, name string) *clients.BranchRef {

checks/ci_tests.go

@@ -18,9 +18,9 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // States for which CI system is in use.

checks/cii_best_practices.go

@@ -21,8 +21,8 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckCIIBestPractices is the registered name for CIIBestPractices.

checks/code_review.go

@@ -18,8 +18,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckCodeReview is the registered name for DoesCodeReview.

checks/contributors.go

@@ -18,8 +18,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

checks/dependency_update_tool.go

@@ -17,7 +17,7 @@ package checks
 import (
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
+	"github.com/ossf/scorecard/v3/checker"
 )
 
 // CheckDependencyUpdateTool is the exported name for Automatic-Depdendency-Update.

checks/file_utils.go

@@ -20,9 +20,9 @@ import (
 	"path"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // isMatchingPath uses 'pattern' to shell-match the 'path' and its filename

checks/fuzzing.go

@@ -20,10 +20,10 @@ import (
 
 	"go.uber.org/zap"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckFuzzing is the registered name for Fuzzing.

checks/maintained.go

@@ -18,8 +18,8 @@ import (
 	"fmt"
 	"time"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

checks/packaging.go

@@ -20,8 +20,8 @@ import (
 	"regexp"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckPackaging is the registered name for Packaging.

checks/permissions.go

@@ -20,8 +20,8 @@ import (
 
 	"gopkg.in/yaml.v2"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckTokenPermissions is the exported name for Token-Permissions check.

checks/permissions_test.go

@@ -19,8 +19,8 @@ import (
 	"io/ioutil"
 	"testing"
 
-	"github.com/ossf/scorecard/v2/checker"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 //nolint

checks/pinned_dependencies.go

@@ -23,8 +23,8 @@ import (
 	"github.com/moby/buildkit/frontend/dockerfile/parser"
 	"gopkg.in/yaml.v3"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckPinnedDependencies is the registered name for FrozenDeps.

checks/pinned_dependencies_test.go

@@ -23,8 +23,8 @@ import (
 	"github.com/google/go-cmp/cmp"
 	"gopkg.in/yaml.v3"
 
-	"github.com/ossf/scorecard/v2/checker"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 func TestGithubWorkflowPinning(t *testing.T) {

checks/sast.go

@@ -17,9 +17,9 @@ package checks
 import (
 	"fmt"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckSAST is the registered name for SAST.

checks/security_policy.go

@@ -20,9 +20,9 @@ import (
 
 	"go.uber.org/zap"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // CheckSecurityPolicy is the registred name for SecurityPolicy.

checks/shell_download_validate.go

@@ -27,8 +27,8 @@ import (
 
 	"mvdan.cc/sh/v3/syntax"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 var (

checks/signed_releases.go

@@ -18,8 +18,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

checks/vulnerabilities.go

@@ -21,8 +21,8 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checker"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

clients/githubrepo/branches.go

@@ -22,8 +22,8 @@ import (
 	"github.com/google/go-github/v38/github"
 	"github.com/shurcooL/githubv4"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

clients/githubrepo/checkruns.go

@@ -20,8 +20,8 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 type checkrunsHandler struct {

clients/githubrepo/client.go

@@ -26,9 +26,9 @@ import (
 	"go.uber.org/zap"
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/clients"
-	"github.com/ossf/scorecard/v2/clients/githubrepo/roundtripper"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	"github.com/ossf/scorecard/v3/clients/githubrepo/roundtripper"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 var errInputRepoType = errors.New("input repo should be of type repoURL")

clients/githubrepo/contributors.go

@@ -21,7 +21,7 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	"github.com/ossf/scorecard/v2/clients"
+	"github.com/ossf/scorecard/v3/clients"
 )
 
 type contributorsHandler struct {

clients/githubrepo/graphql.go

@@ -21,8 +21,8 @@ import (
 
 	"github.com/shurcooL/githubv4"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

clients/githubrepo/releases.go

@@ -21,8 +21,8 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 type releasesHandler struct {

clients/githubrepo/repo_url.go

@@ -19,8 +19,8 @@ import (
 	"net/url"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

clients/githubrepo/roundtripper/census.go

@@ -22,8 +22,8 @@ import (
 	opencensusstats "go.opencensus.io/stats"
 	"go.opencensus.io/tag"
 
-	sce "github.com/ossf/scorecard/v2/errors"
-	"github.com/ossf/scorecard/v2/stats"
+	sce "github.com/ossf/scorecard/v3/errors"
+	"github.com/ossf/scorecard/v3/stats"
 )
 
 const fromCacheHeader = "X-From-Cache"

clients/githubrepo/roundtripper/rate_limit.go

@@ -22,7 +22,7 @@ import (
 
 	"go.uber.org/zap"
 
-	sce "github.com/ossf/scorecard/v2/errors"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // MakeRateLimitedTransport returns a RoundTripper which rate limits GitHub requests.

clients/githubrepo/roundtripper/transport.go

@@ -24,7 +24,7 @@ import (
 	"go.opencensus.io/stats"
 	"go.opencensus.io/tag"
 
-	githubstats "github.com/ossf/scorecard/v2/clients/githubrepo/stats"
+	githubstats "github.com/ossf/scorecard/v3/clients/githubrepo/stats"
 )
 
 const expiryTimeInSec = 30

clients/githubrepo/search.go

@@ -22,7 +22,7 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	"github.com/ossf/scorecard/v2/clients"
+	"github.com/ossf/scorecard/v3/clients"
 )
 
 var errEmptyQuery = errors.New("search query is empty")

clients/githubrepo/search_test.go

@@ -18,7 +18,7 @@ import (
 	"errors"
 	"testing"
 
-	"github.com/ossf/scorecard/v2/clients"
+	"github.com/ossf/scorecard/v3/clients"
 )
 
 func TestBuildQuery(t *testing.T) {

clients/githubrepo/statuses.go

@@ -20,8 +20,8 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 type statusesHandler struct {

clients/githubrepo/tarball.go

@@ -30,7 +30,7 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	sce "github.com/ossf/scorecard/v2/errors"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 const (

clients/githubrepo/workflows.go

@@ -20,8 +20,8 @@ import (
 
 	"github.com/google/go-github/v38/github"
 
-	"github.com/ossf/scorecard/v2/clients"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/clients"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 type workflowsHandler struct {

clients/mockrepo/client.go

@@ -23,7 +23,7 @@ import (
 	reflect "reflect"
 
 	gomock "github.com/golang/mock/gomock"
-	clients "github.com/ossf/scorecard/v2/clients"
+	clients "github.com/ossf/scorecard/v3/clients"
 )
 
 // MockRepoClient is a mock of RepoClient interface.

clients/mockrepo/repo.go

@@ -23,7 +23,7 @@ import (
 	reflect "reflect"
 
 	gomock "github.com/golang/mock/gomock"
-	clients "github.com/ossf/scorecard/v2/clients"
+	clients "github.com/ossf/scorecard/v3/clients"
 )
 
 // MockRepo is a mock of Repo interface.

cmd/root.go

@@ -30,14 +30,14 @@ import (
 	"github.com/spf13/cobra"
 	"go.uber.org/zap"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	docs "github.com/ossf/scorecard/v2/docs/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
-	"github.com/ossf/scorecard/v2/pkg"
-	spol "github.com/ossf/scorecard/v2/policy"
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
+	"github.com/ossf/scorecard/v3/pkg"
+	spol "github.com/ossf/scorecard/v3/policy"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 var (

cmd/serve.go

@@ -24,10 +24,10 @@ import (
 
 	"github.com/spf13/cobra"
 
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	"github.com/ossf/scorecard/v2/pkg"
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	"github.com/ossf/scorecard/v3/pkg"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 //nolint:gochecknoinits

cmd/version.go

@@ -19,7 +19,7 @@ import (
 
 	"github.com/spf13/cobra"
 
-	"github.com/ossf/scorecard/v2/pkg"
+	"github.com/ossf/scorecard/v3/pkg"
 )
 
 //nolint:gochecknoinits

cron/bq/main.go

@@ -28,8 +28,8 @@ import (
 
 	"google.golang.org/protobuf/encoding/protojson"
 
-	"github.com/ossf/scorecard/v2/cron/config"
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/config"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 type shardSummary struct {

cron/controller/main.go

@@ -24,10 +24,10 @@ import (
 	"google.golang.org/protobuf/encoding/protojson"
 	"google.golang.org/protobuf/types/known/timestamppb"
 
-	"github.com/ossf/scorecard/v2/cron/config"
-	"github.com/ossf/scorecard/v2/cron/data"
-	"github.com/ossf/scorecard/v2/cron/pubsub"
-	"github.com/ossf/scorecard/v2/pkg"
+	"github.com/ossf/scorecard/v3/cron/config"
+	"github.com/ossf/scorecard/v3/cron/data"
+	"github.com/ossf/scorecard/v3/cron/pubsub"
+	"github.com/ossf/scorecard/v3/pkg"
 )
 
 func publishToRepoRequestTopic(ctx context.Context, iter data.Iterator, datetime time.Time) (int32, error) {

cron/data/add/main.go

@@ -20,8 +20,8 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/ossf/scorecard/v2/cron/data"
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/cron/data"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 // Script to add new project repositories to the projects.csv file:

cron/data/add/main_test.go

@@ -21,8 +21,8 @@ import (
 	"github.com/google/go-cmp/cmp"
 	"github.com/google/go-cmp/cmp/cmpopts"
 
-	"github.com/ossf/scorecard/v2/cron/data"
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/cron/data"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 func isLessThanRepoURL(x, y repos.RepoURL) bool {

cron/data/blob.go

@@ -27,7 +27,7 @@ import (
 	// Needed to link in GCP drivers.
 	_ "gocloud.dev/blob/gcsblob"
 
-	"github.com/ossf/scorecard/v2/cron/config"
+	"github.com/ossf/scorecard/v3/cron/config"
 )
 
 const (

cron/data/iterator.go

@@ -22,7 +22,7 @@ import (
 
 	"github.com/jszwec/csvutil"
 
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 // Iterator interface is used to iterate through list of input repos for the cron job.

cron/data/iterator_test.go

@@ -21,7 +21,7 @@ import (
 
 	"github.com/google/go-cmp/cmp"
 
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 type outcome struct {

cron/data/update/dependency.go

@@ -30,8 +30,8 @@ import (
 	"github.com/google/go-github/v38/github"
 	"golang.org/x/tools/go/vcs"
 
-	"github.com/ossf/scorecard/v2/cron/data"
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/cron/data"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 var (

cron/data/update/main.go

@@ -19,7 +19,7 @@ import (
 	"bytes"
 	"os"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 // Adds "project=${PROJECT},dependency=true" to the repositories metadata.

cron/data/validate/main.go

@@ -19,7 +19,7 @@ import (
 	"log"
 	"os"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 // Validates data.Iterator used by production PubSub cron job.

cron/data/writer.go

@@ -22,7 +22,7 @@ import (
 
 	"github.com/jszwec/csvutil"
 
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 func repoFormatFromRepoURL(repoURLs []repos.RepoURL) []repoFormat {

cron/data/writer_test.go

@@ -18,7 +18,7 @@ import (
 	"bytes"
 	"testing"
 
-	"github.com/ossf/scorecard/v2/repos"
+	"github.com/ossf/scorecard/v3/repos"
 )
 
 func TestCsvWriter(t *testing.T) {

cron/format/json.go

@@ -24,9 +24,9 @@ import (
 
 	"go.uber.org/zap/zapcore"
 
-	docs "github.com/ossf/scorecard/v2/docs/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
-	"github.com/ossf/scorecard/v2/pkg"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
+	"github.com/ossf/scorecard/v3/pkg"
 )
 
 //nolint

cron/format/json_test.go

@@ -27,8 +27,8 @@ import (
 	"github.com/xeipuuv/gojsonschema"
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/pkg"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/pkg"
 )
 
 func jsonMockDocRead() *mockDoc {

cron/format/mock_doc.go

@@ -17,7 +17,7 @@ package format
 import (
 	"strings"
 
-	docs "github.com/ossf/scorecard/v2/docs/checks"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
 )
 
 type mockCheck struct {

cron/monitoring/exporter.go

@@ -24,7 +24,7 @@ import (
 	"contrib.go.opencensus.io/exporter/stackdriver/monitoredresource/gcp"
 	"go.opencensus.io/stats/view"
 
-	"github.com/ossf/scorecard/v2/cron/config"
+	"github.com/ossf/scorecard/v3/cron/config"
 )
 
 var errorUndefinedExporter = errors.New("unsupported exporterType")

cron/pubsub/publisher.go

@@ -29,7 +29,7 @@ import (
 	_ "gocloud.dev/pubsub/gcppubsub"
 	"google.golang.org/protobuf/encoding/protojson"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 var errorPublish = errors.New("total errors when publishing")

cron/pubsub/publisher_test.go

@@ -21,7 +21,7 @@ import (
 
 	"gocloud.dev/pubsub"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 type mockSucceedTopic struct{}

cron/pubsub/subscriber.go

@@ -21,7 +21,7 @@ import (
 
 	"google.golang.org/protobuf/encoding/protojson"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 // ErrorInParse indicates there was an error while unmarshalling the protocol buffer message.

cron/pubsub/subscriber_gcs.go

@@ -24,7 +24,7 @@ import (
 	pubsub "cloud.google.com/go/pubsub/apiv1"
 	pubsubpb "google.golang.org/genproto/googleapis/pubsub/v1"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 const (

cron/pubsub/subscriber_gocloud.go

@@ -24,7 +24,7 @@ import (
 	// Needed to link in GCP drivers.
 	_ "gocloud.dev/pubsub/gcppubsub"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 type receiver interface {

cron/pubsub/subscriber_gocloud_test.go

@@ -23,7 +23,7 @@ import (
 	"google.golang.org/protobuf/encoding/protojson"
 	"google.golang.org/protobuf/proto"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 type mockReceiver struct {

cron/webhook/main.go

@@ -26,7 +26,7 @@ import (
 	"github.com/google/go-containerregistry/pkg/v1/google"
 	"google.golang.org/protobuf/encoding/protojson"
 
-	"github.com/ossf/scorecard/v2/cron/data"
+	"github.com/ossf/scorecard/v3/cron/data"
 )
 
 const stableTag = "stable"

cron/worker/main.go

@@ -31,21 +31,21 @@ import (
 	"go.uber.org/zap"
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	githubstats "github.com/ossf/scorecard/v2/clients/githubrepo/stats"
-	"github.com/ossf/scorecard/v2/cron/config"
-	"github.com/ossf/scorecard/v2/cron/data"
-	format "github.com/ossf/scorecard/v2/cron/format"
-	"github.com/ossf/scorecard/v2/cron/monitoring"
-	"github.com/ossf/scorecard/v2/cron/pubsub"
-	docs "github.com/ossf/scorecard/v2/docs/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
-	"github.com/ossf/scorecard/v2/pkg"
-	"github.com/ossf/scorecard/v2/repos"
-	"github.com/ossf/scorecard/v2/stats"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	githubstats "github.com/ossf/scorecard/v3/clients/githubrepo/stats"
+	"github.com/ossf/scorecard/v3/cron/config"
+	"github.com/ossf/scorecard/v3/cron/data"
+	format "github.com/ossf/scorecard/v3/cron/format"
+	"github.com/ossf/scorecard/v3/cron/monitoring"
+	"github.com/ossf/scorecard/v3/cron/pubsub"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
+	"github.com/ossf/scorecard/v3/pkg"
+	"github.com/ossf/scorecard/v3/repos"
+	"github.com/ossf/scorecard/v3/stats"
 )
 
 var ignoreRuntimeErrors = flag.Bool("ignoreRuntimeErrors", false, "if set to true any runtime errors will be ignored")

docs/checks/impl.go

@@ -20,8 +20,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/docs/checks/internal"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/docs/checks/internal"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 var errCheckNotExist = errors.New("check does not exist")

docs/checks/internal/generate/main.go

@@ -18,7 +18,7 @@ import (
 	"os"
 	"sort"
 
-	docs "github.com/ossf/scorecard/v2/docs/checks"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
 )
 
 func main() {

docs/checks/internal/validate/main.go

@@ -17,8 +17,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ossf/scorecard/v2/checks"
-	docs "github.com/ossf/scorecard/v2/docs/checks"
+	"github.com/ossf/scorecard/v3/checks"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
 )
 
 var allowedRisks = map[string]bool{"Critical": true, "High": true, "Medium": true, "Low": true}

e2e/binary_artifacts_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 // TODO: use dedicated repo that don't change.

e2e/branch_protection_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckBranchProtection, func() {

e2e/ci_tests_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckCITests, func() {

e2e/cii_best_practices_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:CIIBestPractices", func() {

e2e/code_review_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 // TODO: use dedicated repo that don't change.

e2e/contributors_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckContributors, func() {

e2e/dependency_update_tool_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 // TODO: use dedicated repo that don't change.

e2e/e2e_suite_test.go

@@ -22,7 +22,7 @@ import (
 	. "github.com/onsi/gomega"
 	"go.uber.org/zap"
 
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
 )
 
 var logger *zap.Logger

e2e/executable_test.go

@@ -21,7 +21,7 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checks"
+	"github.com/ossf/scorecard/v3/checks"
 )
 
 type scorecard struct {

e2e/fuzzing_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckFuzzing, func() {

e2e/maintained_test.go

@@ -21,10 +21,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckMaintained, func() {

e2e/packaging_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckPackaging, func() {

e2e/permissions_test.go

@@ -19,10 +19,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckTokenPermissions, func() {

e2e/pinned_dependencies_test.go

@@ -19,10 +19,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 // TODO: use dedicated repo that don't change.

e2e/sast_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckSAST, func() {

e2e/security_policy_test.go

@@ -19,10 +19,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:SecurityPolicy", func() {

e2e/signedreleases_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:"+checks.CheckSignedReleases, func() {

e2e/vulnerabilities_test.go

@@ -20,10 +20,10 @@ import (
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/checks"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	scut "github.com/ossf/scorecard/v2/utests"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/checks"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	scut "github.com/ossf/scorecard/v3/utests"
 )
 
 var _ = Describe("E2E TEST:Vulnerabilities", func() {

go.mod

@@ -1,4 +1,4 @@
-module github.com/ossf/scorecard/v2
+module github.com/ossf/scorecard/v3
 
 go 1.17
 

main.go

@@ -15,7 +15,7 @@
 // Package main of OSSF Scoreard.
 package main
 
-import "github.com/ossf/scorecard/v2/cmd"
+import "github.com/ossf/scorecard/v3/cmd"
 
 func main() {
 	cmd.Execute()

pkg/common.go

@@ -20,7 +20,7 @@ import (
 
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
+	"github.com/ossf/scorecard/v3/checker"
 )
 
 func textToMarkdown(s string) string {

pkg/json.go

@@ -21,8 +21,8 @@ import (
 
 	"go.uber.org/zap/zapcore"
 
-	docs "github.com/ossf/scorecard/v2/docs/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 //nolint

pkg/json_test.go

@@ -27,7 +27,7 @@ import (
 	"github.com/xeipuuv/gojsonschema"
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
+	"github.com/ossf/scorecard/v3/checker"
 )
 
 func jsonMockDocRead() *mockDoc {

pkg/mock_doc.go

@@ -17,7 +17,7 @@ package pkg
 import (
 	"strings"
 
-	docs "github.com/ossf/scorecard/v2/docs/checks"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
 )
 
 type mockCheck struct {

pkg/sarif.go

@@ -23,10 +23,10 @@ import (
 
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
-	docs "github.com/ossf/scorecard/v2/docs/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
-	spol "github.com/ossf/scorecard/v2/policy"
+	"github.com/ossf/scorecard/v3/checker"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
+	spol "github.com/ossf/scorecard/v3/policy"
 )
 
 type text struct {

pkg/sarif_test.go

@@ -23,8 +23,8 @@ import (
 
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
-	spol "github.com/ossf/scorecard/v2/policy"
+	"github.com/ossf/scorecard/v3/checker"
+	spol "github.com/ossf/scorecard/v3/policy"
 )
 
 func sarifMockDocRead() *mockDoc {

pkg/scorecard.go

@@ -24,12 +24,12 @@ import (
 	opencensusstats "go.opencensus.io/stats"
 	"go.opencensus.io/tag"
 
-	"github.com/ossf/scorecard/v2/checker"
-	"github.com/ossf/scorecard/v2/clients"
-	"github.com/ossf/scorecard/v2/clients/githubrepo"
-	sce "github.com/ossf/scorecard/v2/errors"
-	"github.com/ossf/scorecard/v2/repos"
-	"github.com/ossf/scorecard/v2/stats"
+	"github.com/ossf/scorecard/v3/checker"
+	"github.com/ossf/scorecard/v3/clients"
+	"github.com/ossf/scorecard/v3/clients/githubrepo"
+	sce "github.com/ossf/scorecard/v3/errors"
+	"github.com/ossf/scorecard/v3/repos"
+	"github.com/ossf/scorecard/v3/stats"
 )
 
 func logStats(ctx context.Context, startTime time.Time) {

pkg/scorecard_result.go

@@ -23,9 +23,9 @@ import (
 	"github.com/olekukonko/tablewriter"
 	"go.uber.org/zap/zapcore"
 
-	"github.com/ossf/scorecard/v2/checker"
-	docs "github.com/ossf/scorecard/v2/docs/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checker"
+	docs "github.com/ossf/scorecard/v3/docs/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 // ScorecardInfo contains information about the scorecard code that was run.

policy/policy.go

@@ -20,8 +20,8 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/ossf/scorecard/v2/checks"
-	sce "github.com/ossf/scorecard/v2/errors"
+	"github.com/ossf/scorecard/v3/checks"
+	sce "github.com/ossf/scorecard/v3/errors"
 )
 
 var (