When trying to run the submission for multiple go.mod files in a monorepo (using go.work) I end up with errors like:
Error: assertion failed: expected no more than one package in cache with namespace+name. Found: [{"packageURL":{"type":"golang","name":"go","namespace":"cloud.google.com","version":"v0.121.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go","namespace":"github.com/cncf/xds","version":"v0.0.0-20250501225837-2ac532fd4443","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go","namespace":"github.com/json-iterator","version":"v1.1.12","qualifiers":null,"subpath":null},"dependencies":[]}]for {"name":"go"}
In addition, the configuration for the monorepo is quite tedious having to run this action for each go.mod in the repo.
Interestingly this happens even if I only run for a single go.mod in the monorepo, but that go.mod ends up referencing other modules in the workspace that have (the same version) of the dependency highlighted in the error.
When trying to run the submission for multiple
go.modfiles in a monorepo (usinggo.work) I end up with errors like:In addition, the configuration for the monorepo is quite tedious having to run this action for each
go.modin the repo.Interestingly this happens even if I only run for a single
go.modin the monorepo, but that go.mod ends up referencing other modules in the workspace that have (the same version) of the dependency highlighted in the error.