# Pre processing for golang packages

**URL:** https://community.sonatype.com/t/pre-processing-for-golang-packages/4759
**Category:** Sonatype Lifecycle & Firewall
**Created:** [August 20, 2020, 4:04pm UTC](https://community.sonatype.com/t/pre-processing-for-golang-packages/4759 "2020-08-20T16:04:28Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![srishti.suman](https://avatars.discourse-cdn.com/v4/letter/s/7bcc69/32.png) [@srishti.suman](https://community.sonatype.com/u/srishti.suman)
#### Post date: [August 20, 2020, 4:04pm UTC](https://community.sonatype.com/t/pre-processing-for-golang-packages/4759/1 "2020-08-20T16:04:28Z")

</div>

Could you please help us with below query.

Package [golang.org/x/text](http://golang.org/x/text) : MinIO already uses the version v0.3.3, but is being reported as vulnerability in IQ scan.

Can Sonatype provide some pre-processing for Go components as is done for NPM components by asking the dependency management system which libraries it would pick and grab them for checking as it were.

---

<div class="post-metadata">

### Author: ![bjohnson](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/bjohnson/32/1441_2.png) [@bjohnson](https://community.sonatype.com/u/bjohnson)
#### Post date: [September 9, 2020, 5:58pm UTC](https://community.sonatype.com/t/pre-processing-for-golang-packages/4759/2 "2020-09-09T17:58:45Z")

</div>

I’ve got this same issue. I’m thinking this is a false positive because we vendor our deps and it’s scanning the go.sum files in our vendor directory.