pool/gosec
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 7a6a8c0ff0 Accepting request 1250766 from devel:languages:go factory Ana Guerrero 2025-03-07 15:40:18 +00:00
  • ea899f57e6 - Update to version 2.22.2: * Update to go version 1.24.1 and 1.23.7 (#1313) * chore(deps): update all dependencies (#1310) * chore(deps): update all dependencies (#1308) * Update gosec version in the GitHub action to v2.22.1 (#1307) * chore(deps): update module google.golang.org/api to v0.221.0 (#1305) devel Jeff Kowalczyk 2025-03-06 17:09:41 +00:00
  • 38eae3675b Cleanup dangling files. Jeff Kowalczyk 2025-02-19 13:43:55 +00:00
  • 0f5a9d4ba8 Accepting request 1245719 from devel:languages:go Ana Guerrero 2025-02-13 17:40:23 +00:00
  • 93582b55c9 - Update to version 2.22.1: * Update cosign to v2.4.2 (#1303) * Add support for go 1.24 and phased out support for go 1.22 (#1302) * chore(deps): update all dependencies (#1300) * Update to go version 1.23.6 and 1.22.12 (#1299) * chore(deps): update module google.golang.org/api to v0.219.0 (#1296) * chore(deps): update module google.golang.org/api to v0.218.0 (#1294) * Add test to conver unit parssing for G115 rule (#1293) * Update to go version 1.23.5 and 1.22.11 (#1291) * chore(deps): update all dependencies (#1290) * Update gosec in github action to 2.22.0 (#1286) Jeff Kowalczyk 2025-02-13 15:48:27 +00:00
  • 12cdf9d603 Accepting request 1236236 from devel:languages:go Ana Guerrero 2025-01-12 10:14:49 +00:00
  • 4ee4354470 - Update to version 2.22.0: * Update what message for G104 (#1282) * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281) * chore(deps): update all dependencies (#1280) * chore(deps): update all dependencies (#1279) * Simplify sortIssues implementation (#1277) * Enable testifylint and fix up lint issues (#1276) * Refactor AppendError to check for build.NoGoError (#1273) * chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275) * Update README.md (#1274) * Rule documentation updates (#1272) * Replace old golang.org links with new go.dev (#1271) * Refactor AppendError to use strings.Contains (#1270) * Simplify Analyzer.ignore by reducing nesting (#1269) * Improve capitalization in AI API flags descriptions (#1267) * Remove unused golint dependency (#1266) * Simplify tests by using GinkgoT().TempDir() (#1265) * Documentation on adding new rules and analyzers (#1262) * chore(deps): update all dependencies (#1268) * Update to go 1.22.10 and 1.23.4 versions (#1264) * chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263) * chore(deps): update all dependencies (#1261) * chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259) * fix: revive.redefines-builtin-id lint warnings (#1257) * Fix typos in comments and fields * Remove the decryption funtions/methods from G407 check * Upate go to version 1.23.3 and 1.22.9 * Fix G115 false positive when going from parsed uint to larger int * chore(deps): update all dependencies * chore(deps): update all dependencies Jeff Kowalczyk 2025-01-09 14:20:49 +00:00
  • dc21dfc717 Accepting request 1203918 from devel:languages:go Ana Guerrero 2024-09-27 15:10:43 +00:00
  • 752f47601f - Update to version 2.21.4: * Update the gosec to v2.21.4 in the Github action * Add the version into goreleaser config * chore(deps): update module google.golang.org/api to v0.198.0 (#1233) * Prevent panic: unexpected constant value: <nil> (#1232) * Fix running single analyzer which isn't a rule bug (#1231) Jeff Kowalczyk 2024-09-26 14:55:27 +00:00
  • b3feb420b6 Accepting request 1201897 from devel:languages:go Ana Guerrero 2024-09-19 19:17:27 +00:00
  • 594e5d48c9 - Update to version 2.21.3: * Update gosec version to v2.21.3 in github action (#1227) * Populate the fixes only when autofix is not empty (#1226) * chore(deps): update all dependencies (#1223) * G115 Struct Attribute Checks (#1221) Jeff Kowalczyk 2024-09-19 00:10:02 +00:00
  • a32e2a03fa Accepting request 1199817 from devel:languages:go Ana Guerrero 2024-09-10 19:13:58 +00:00
  • 68e7081560 - Update to version 2.21.2: * Update the github action to v2.21.2 (#1218) * Update the SARIF schema URL (#1217) * Update go version to 1.23.1 and 1.22.7 (#1216) * chore(deps): update all dependencies (#1215) * Update gosec version to v2.21.1 in github action (#1213) * Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210) * Update gosec in github action to v2.21.0 (#1208) * Update cosign version to v2.4.0 in release github workflow (#1207) * Improvement the int conversion overflow logic to handle bound checks (#1194) * fix: G602 support for nested conditionals with bounds check (#1201) * Update go.mod to sue go 1.22.0 toolchain * chore(deps): update all dependencies * Make variable name more clear * Make variable names more explicity and reduce duplications * Fix formatting * Refactor to reduce some fuctions and variable names * Pass the value argument directly since is an interface * Added suggested changes * Added another test case in order to increase code coverage * Removed function parameter which is always the same * Formatting problems(CI was not passing) * Updated analyzer to use new way of initialization * Migrated the rule to the analyzers folder * Refractored code a little bit * Added new rule G407(hardcoded IV/nonce) * Fix conversion overflow false positive when using ParseUint * Add a build step to measure the scan perfomance * Fix conversion overflow false positives when they are checked or pre-determined * Update go.mod * chore(deps): update all dependencies * Fix false positive in conversion overflow check from uint8/int8 type * Disable staticcheck SA1019 rule * Update the golangci linters * Add more test to cover more use cases for G115 rule * Allow excluding analyzers globally (#1180) * Update to Go 1.23.0 (#1183) * chore(deps): update all dependencies (#1182) * Read the AI API key also from an environment variable (#1181) * Add support to generate auto fixes using LLM (AI) (#1177) * chore(deps): update all dependencies * chore(deps): update all dependencies * chore(deps): update all dependencies * chore(deps): update dependency babel-standalone to v7.24.10 * Resolve underlying type to detect overflows in type aliases * chore(deps): update dependency babel-standalone to v7.24.8 * Fix multifile ignores * Add -enable-audit cli flag * Update to go 1.22.5 and 1.21.12 * chore(deps): update all dependencies * Added more rules * Fixed coverage workflow * Fixed CI workflow * Minor changes * Split the G401 rule into two separate ones * Updated G401 corresponding CWE * chore(deps): update docker/build-push-action action to v6 * Update to go versions to 1.21.11 and 1.22.4 * chore(deps): update all dependencies * Fix nosec when applied to a block * Add more types to templates rule * Map the G115 rule to an CWE ID * chore(deps): update all dependencies * Update README with G115 rule description * Remove deprecated megacheck linter from golangci * Format imports * Update .gitignore * Add a new rule to detect integer overflow on integer types conversion * feat: add env var to override the Go version detection * Use the proper logic when disabling the go module version * Update the README with some details related to Go version used by the rules * Add an environment varialbe which disables the parsing of Go version from module file * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3 Jeff Kowalczyk 2024-09-10 08:03:04 +00:00
  • fafc4989ab Accepting request 1174686 from devel:languages:go Ana Guerrero 2024-05-17 18:05:37 +00:00
  • b3af705157 Accepting request 1174421 from home:ph03nix Jeff Kowalczyk 2024-05-16 21:07:16 +00:00
  • 9fdddf4569 Accepting request 1146391 from devel:languages:go Ana Guerrero 2024-02-13 21:44:27 +00:00
  • ebc3d38705 Accepting request 1146309 from home:ph03nix Jeff Kowalczyk 2024-02-13 12:34:07 +00:00
  • e1b0d750bb Accepting request 1128786 from devel:languages:go Ana Guerrero 2023-11-26 18:37:34 +00:00
  • 89db85e435 - update to 2.18.2: * Disable dot-imports in revive linter * Run the gosec with data race detector active during tests * Fix data race in the analyzer * Fix test that checks the overriden nosec directive * Clean global state in flgs tests * Format the file * Update README with details which describe the current of #nosec * Ensure the ignores are parsed before analysing the package Dirk Mueller 2023-11-25 19:22:44 +00:00
  • 444d33c6b1 Accepting request 1118372 from devel:languages:go Ana Guerrero 2023-10-18 19:25:30 +00:00
  • 4a6b103660 Accepting request 1118368 from home:jfkw:branches:devel:languages:go Jeff Kowalczyk 2023-10-17 20:28:40 +00:00
  • e27b1b4080 Accepting request 1116475 from devel:languages:go Ana Guerrero 2023-10-10 18:59:54 +00:00
  • 6a366dca8c Accepting request 1116472 from home:jfkw:branches:devel:languages:go Jeff Kowalczyk 2023-10-09 13:34:07 +00:00
  • cb31542fce Accepting request 1116406 from home:ph03nix Jeff Kowalczyk 2023-10-09 13:09:06 +00:00
  • 11afb2c274 Accepting request 1104424 from devel:languages:go Ana Guerrero 2023-08-18 17:28:11 +00:00
  • 6247685edb Accepting request 1104395 from home:ph03nix Jeff Kowalczyk 2023-08-17 14:14:59 +00:00
  • a641f4c7d1 Accepting request 1088705 from devel:languages:go Dominique Leuenberger 2023-05-24 18:22:28 +00:00
  • 826d609a07 Accepting request 1088575 from home:ph03nix Jeff Kowalczyk 2023-05-23 15:11:06 +00:00
  • b9fba275b9 Accepting request 1063471 from devel:languages:go Dominique Leuenberger 2023-02-07 17:48:54 +00:00
  • d85194afd4 Accepting request 1063437 from home:ph03nix Jeff Kowalczyk 2023-02-06 16:13:51 +00:00
  • 11a6ca5834 Accepting request 1043867 from devel:languages:go Dominique Leuenberger 2022-12-20 19:20:53 +00:00
  • 9a95cd3edd Accepting request 1043862 from home:jfkw:branches:devel:languages:go Jeff Kowalczyk 2022-12-20 07:32:00 +00:00
  • 66c1da04a3 Accepting request 1026508 from devel:languages:go Dominique Leuenberger 2022-10-18 10:45:07 +00:00
  • afd8f8285e Accepting request 1014614 from home:ph03nix Jeff Kowalczyk 2022-10-17 14:17:43 +00:00
  • 3780ea13d3 Accepting request 998691 from devel:languages:go Dominique Leuenberger 2022-08-23 12:29:35 +00:00
  • 64101d2629 Accepting request 998624 from home:ph03nix Jeff Kowalczyk 2022-08-22 16:37:08 +00:00
  • 8f58c1a2f6 Accepting request 984265 from devel:languages:go Dominique Leuenberger 2022-06-23 08:23:40 +00:00
  • aec1c2704e Accepting request 984075 from home:jfkw:branches:devel:languages:go Jeff Kowalczyk 2022-06-21 22:37:53 +00:00
  • ff94bdca60 Accepting request 982726 from home:ph03nix Jeff Kowalczyk 2022-06-15 15:15:16 +00:00
  • 7bad9ae65f Accepting request 974964 from devel:languages:go Dominique Leuenberger 2022-05-05 21:06:13 +00:00
  • d26a470ef6 Accepting request 974534 from home:ph03nix Jeff Kowalczyk 2022-05-04 15:16:25 +00:00
  • 66481f311e Accepting request 963855 from home:ph03nix Jeff Kowalczyk 2022-03-23 07:30:13 +00:00
  • 9a0c78dd09 Accepting request 958490 from devel:languages:go Dominique Leuenberger 2022-03-02 17:22:36 +00:00
  • 990659287e Accepting request 958397 from home:ph03nix Jeff Kowalczyk 2022-03-02 16:23:29 +00:00
  • 0d295e37d7 Accepting request 950920 from devel:languages:go Dominique Leuenberger 2022-02-07 22:37:55 +00:00
  • 05290390fe Accepting request 947871 from home:ph03nix Jeff Kowalczyk 2022-02-01 21:12:11 +00:00