Drop go support from gitlab and github

Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>

Author: TG1999

vulnerabilities/importers/github.py

@@ -125,7 +125,7 @@
     "COMPOSER": "composer",
     "PIP": "pypi",
     "RUBYGEMS": "gem",
-    "GO": "golang",
+    # "GO": "golang",
 }
 
 GITHUB_ECOSYSTEM_BY_PACKAGE_TYPE = {

vulnerabilities/importers/gitlab.py

@@ -61,14 +61,15 @@
 
 
 PURL_TYPE_BY_GITLAB_SCHEME = {
+    # "conan": "conan",
     "gem": "gem",
-    "go": "golang",
+    # Entering issue to parse go package names https://github.com/nexB/vulnerablecode/issues/742
+    # "go": "golang",
     "maven": "maven",
     "npm": "npm",
     "nuget": "nuget",
-    "pypi": "pypi",
     "packagist": "composer",
-    # "conan": "conan",
+    "pypi": "pypi",
 }
 
 
@@ -125,7 +126,7 @@ def get_purl(package_slug):
         name = parts[1]
         return PackageURL(type=purl_type, name=name)
     # if package slug is of the form:
-    # "nuget/github/user/abc/NuGet.Core"
+    # "nuget/github.com/beego/beego/v2/nuget"
     if len(parts) >= 3:
         name = parts[-1]
         namespace = "/".join(parts[1:-1])
@@ -191,7 +192,7 @@ def parse_gitlab_advisory(file):
     urls = gitlab_advisory.get("urls")
     references = [Reference.from_url(u) for u in urls]
     date_published = dateparser.parse(gitlab_advisory.get("pubdate"))
-    date_published = pytz.utc.localize(date_published)
+    date_published = date_published.replace(tzinfo=pytz.UTC)
     package_slug = gitlab_advisory.get("package_slug")
     purl: PackageURL = get_purl(package_slug=package_slug)
     if not purl:

vulnerabilities/tests/test_gitlab.py

@@ -36,7 +36,7 @@
 TEST_DATA = os.path.join(BASE_DIR, "test_data", "gitlab")
 
 
-@pytest.mark.parametrize("pkg_type", ["maven", "nuget", "gem", "golang", "composer", "pypi", "npm"])
+@pytest.mark.parametrize("pkg_type", ["maven", "nuget", "gem", "composer", "pypi", "npm"])
 def test_parse_yaml_file(pkg_type):
     response_file = os.path.join(TEST_DATA, f"{pkg_type}.yaml")
     expected_file = os.path.join(TEST_DATA, f"{pkg_type}-expected.json")
@@ -84,7 +84,7 @@ def valid_versions(pkg_type):
 
 
 @mock.patch("vulnerabilities.importers.gitlab.GitLabBasicImprover.get_package_versions")
-@pytest.mark.parametrize("pkg_type", ["maven", "nuget", "gem", "golang", "composer", "pypi", "npm"])
+@pytest.mark.parametrize("pkg_type", ["maven", "nuget", "gem", "composer", "pypi", "npm"])
 def test_gitlab_improver(mock_response, pkg_type):
     advisory_file = os.path.join(TEST_DATA, f"{pkg_type}-expected.json")
     expected_file = os.path.join(TEST_DATA, f"{pkg_type}-improver-expected.json")