@@ -853,6 +853,7 @@ linters-settings:
853
853
- G112 # Potential slowloris attack
854
854
- G113 # Usage of Rat.SetString in math/big with an overflow (CVE-2022-23772)
855
855
- G114 # Use of net/http serve function that has no support for setting timeouts
856
+ - G115 # Potential integer overflow when converting between integer types
856
857
- G201 # SQL query construction using format string
857
858
- G202 # SQL query construction using string concatenation
858
859
- G203 # Use of unescaped data in HTML templates
@@ -864,16 +865,21 @@ linters-settings:
864
865
- G305 # File traversal when extracting zip/tar archive
865
866
- G306 # Poor file permissions used when writing to a new file
866
867
- G307 # Poor file permissions used when creating a file with os.Create
867
- - G401 # Detect the usage of DES, RC4, MD5 or SHA1
868
+ - G401 # Detect the usage of MD5 or SHA1
868
869
- G402 # Look for bad TLS connection settings
869
870
- G403 # Ensure minimum RSA key length of 2048 bits
870
871
- G404 # Insecure random number source (rand)
872
+ - G405 # Detect the usage of DES or RC4
873
+ - G406 # Detect the usage of MD4 or RIPEMD160
871
874
- G501 # Import blocklist: crypto/md5
872
875
- G502 # Import blocklist: crypto/des
873
876
- G503 # Import blocklist: crypto/rc4
874
877
- G504 # Import blocklist: net/http/cgi
875
878
- G505 # Import blocklist: crypto/sha1
879
+ - G506 # Import blocklist: golang.org/x/crypto/md4
880
+ - G507 # Import blocklist: golang.org/x/crypto/ripemd160
876
881
- G601 # Implicit memory aliasing of items from a range statement
882
+ - G602 # Slice access out of bounds
877
883
878
884
# To specify a set of rules to explicitly exclude.
879
885
# Available rules: https://github.com/securego/gosec#available-rules
@@ -892,6 +898,7 @@ linters-settings:
892
898
- G112 # Potential slowloris attack
893
899
- G113 # Usage of Rat.SetString in math/big with an overflow (CVE-2022-23772)
894
900
- G114 # Use of net/http serve function that has no support for setting timeouts
901
+ - G115 # Potential integer overflow when converting between integer types
895
902
- G201 # SQL query construction using format string
896
903
- G202 # SQL query construction using string concatenation
897
904
- G203 # Use of unescaped data in HTML templates
@@ -903,16 +910,21 @@ linters-settings:
903
910
- G305 # File traversal when extracting zip/tar archive
904
911
- G306 # Poor file permissions used when writing to a new file
905
912
- G307 # Poor file permissions used when creating a file with os.Create
906
- - G401 # Detect the usage of DES, RC4, MD5 or SHA1
913
+ - G401 # Detect the usage of MD5 or SHA1
907
914
- G402 # Look for bad TLS connection settings
908
915
- G403 # Ensure minimum RSA key length of 2048 bits
909
916
- G404 # Insecure random number source (rand)
917
+ - G405 # Detect the usage of DES or RC4
918
+ - G406 # Detect the usage of MD4 or RIPEMD160
910
919
- G501 # Import blocklist: crypto/md5
911
920
- G502 # Import blocklist: crypto/des
912
921
- G503 # Import blocklist: crypto/rc4
913
922
- G504 # Import blocklist: net/http/cgi
914
923
- G505 # Import blocklist: crypto/sha1
924
+ - G506 # Import blocklist: golang.org/x/crypto/md4
925
+ - G507 # Import blocklist: golang.org/x/crypto/ripemd160
915
926
- G601 # Implicit memory aliasing of items from a range statement
927
+ - G602 # Slice access out of bounds
916
928
917
929
# Exclude generated files
918
930
# Default: false
0 commit comments