File tree 23 files changed +62
-33
lines changed
23 files changed +62
-33
lines changed Original file line number Diff line number Diff line change 1
1
linters :
2
2
enable :
3
- - asciicheck
4
- - bodyclose
5
- - depguard
6
- - dogsled
7
- - durationcheck
8
- - errcheck
9
- - errorlint
10
- - exportloopref
11
- - gci
12
- - gofmt
13
- - gofumpt
14
- - goimports
15
- - gosec
16
- - gosimple
17
- - govet
18
- - importas
19
- - ineffassign
20
- - megacheck
21
- - misspell
22
- - nakedret
23
- - nolintlint
24
- - revive
25
- - staticcheck
26
- - typecheck
27
- - unconvert
28
- - unparam
29
- - unused
30
- - wastedassign
3
+ - asciicheck
4
+ - bodyclose
5
+ - depguard
6
+ - dogsled
7
+ - durationcheck
8
+ - errcheck
9
+ - errorlint
10
+ - exportloopref
11
+ - gci
12
+ - gofmt
13
+ - gofumpt
14
+ - goimports
15
+ - gosec
16
+ - gosimple
17
+ - govet
18
+ - importas
19
+ - ineffassign
20
+ - megacheck
21
+ - misspell
22
+ - nakedret
23
+ - nolintlint
24
+ - revive
25
+ - staticcheck
26
+ - typecheck
27
+ - unconvert
28
+ - unparam
29
+ - unused
30
+ - wastedassign
31
+
32
+ linters-settings :
33
+ gci :
34
+ sections :
35
+ - standard
36
+ - default
37
+ - prefix(github.com/securego)
31
38
32
39
run :
33
40
timeout : 5m
Original file line number Diff line number Diff line change 15
15
package analyzers
16
16
17
17
import (
18
- "github.com/securego/gosec/v2/issue"
19
18
"golang.org/x/tools/go/analysis"
20
19
"golang.org/x/tools/go/analysis/passes/buildssa"
21
20
"golang.org/x/tools/go/ssa"
21
+
22
+ "github.com/securego/gosec/v2/issue"
22
23
)
23
24
24
25
func newSSRFAnalyzer (id string , description string ) * analysis.Analyzer {
Original file line number Diff line number Diff line change @@ -21,9 +21,10 @@ import (
21
21
"os"
22
22
"strconv"
23
23
24
- "github.com/securego/gosec/v2/issue"
25
24
"golang.org/x/tools/go/analysis"
26
25
"golang.org/x/tools/go/analysis/passes/buildssa"
26
+
27
+ "github.com/securego/gosec/v2/issue"
27
28
)
28
29
29
30
// SSAAnalyzerResult contains various information returned by the
Original file line number Diff line number Diff line change 5
5
6
6
. "github.com/onsi/ginkgo/v2"
7
7
. "github.com/onsi/gomega"
8
+
8
9
"github.com/securego/gosec/v2"
9
10
"github.com/securego/gosec/v2/testutils"
10
11
)
Original file line number Diff line number Diff line change 5
5
6
6
. "github.com/onsi/ginkgo/v2"
7
7
. "github.com/onsi/gomega"
8
+
8
9
"github.com/securego/gosec/v2/issue"
9
10
)
10
11
Original file line number Diff line number Diff line change 6
6
7
7
. "github.com/onsi/ginkgo/v2"
8
8
. "github.com/onsi/gomega"
9
+
9
10
"github.com/securego/gosec/v2"
10
11
)
11
12
Original file line number Diff line number Diff line change @@ -3,6 +3,7 @@ package cwe_test
3
3
import (
4
4
. "github.com/onsi/ginkgo/v2"
5
5
. "github.com/onsi/gomega"
6
+
6
7
"github.com/securego/gosec/v2/cwe"
7
8
)
8
9
Original file line number Diff line number Diff line change @@ -3,6 +3,7 @@ package cwe_test
3
3
import (
4
4
. "github.com/onsi/ginkgo/v2"
5
5
. "github.com/onsi/gomega"
6
+
6
7
"github.com/securego/gosec/v2/cwe"
7
8
)
8
9
Original file line number Diff line number Diff line change 6
6
7
7
. "github.com/onsi/ginkgo/v2"
8
8
. "github.com/onsi/gomega"
9
+
9
10
"github.com/securego/gosec/v2/cmd/vflag"
10
11
)
11
12
Original file line number Diff line number Diff line change 8
8
9
9
. "github.com/onsi/ginkgo/v2"
10
10
. "github.com/onsi/gomega"
11
+
11
12
"github.com/securego/gosec/v2"
12
13
"github.com/securego/gosec/v2/testutils"
13
14
)
Original file line number Diff line number Diff line change @@ -3,6 +3,7 @@ package gosec_test
3
3
import (
4
4
. "github.com/onsi/ginkgo/v2"
5
5
. "github.com/onsi/gomega"
6
+
6
7
"github.com/securego/gosec/v2"
7
8
"github.com/securego/gosec/v2/testutils"
8
9
)
Original file line number Diff line number Diff line change 5
5
6
6
. "github.com/onsi/ginkgo/v2"
7
7
. "github.com/onsi/gomega"
8
+
8
9
"github.com/securego/gosec/v2"
9
10
"github.com/securego/gosec/v2/issue"
10
11
"github.com/securego/gosec/v2/rules"
Original file line number Diff line number Diff line change @@ -8,12 +8,13 @@ import (
8
8
9
9
. "github.com/onsi/ginkgo/v2"
10
10
. "github.com/onsi/gomega"
11
+ "gopkg.in/yaml.v3"
12
+
11
13
"github.com/securego/gosec/v2"
12
14
"github.com/securego/gosec/v2/cwe"
13
15
"github.com/securego/gosec/v2/issue"
14
16
"github.com/securego/gosec/v2/report/junit"
15
17
"github.com/securego/gosec/v2/report/sonar"
16
- "gopkg.in/yaml.v3"
17
18
)
18
19
19
20
func createIssueWithFileWhat (file , what string ) * issue.Issue {
Original file line number Diff line number Diff line change 7
7
"strings"
8
8
9
9
"github.com/google/uuid"
10
+
10
11
"github.com/securego/gosec/v2"
11
12
"github.com/securego/gosec/v2/cwe"
12
13
"github.com/securego/gosec/v2/issue"
Original file line number Diff line number Diff line change 6
6
7
7
. "github.com/onsi/ginkgo/v2"
8
8
. "github.com/onsi/gomega"
9
+
9
10
"github.com/securego/gosec/v2"
10
11
"github.com/securego/gosec/v2/issue"
11
12
"github.com/securego/gosec/v2/report/sarif"
Original file line number Diff line number Diff line change @@ -3,6 +3,7 @@ package sonar_test
3
3
import (
4
4
. "github.com/onsi/ginkgo/v2"
5
5
. "github.com/onsi/gomega"
6
+
6
7
"github.com/securego/gosec/v2"
7
8
"github.com/securego/gosec/v2/issue"
8
9
"github.com/securego/gosec/v2/report/sonar"
Original file line number Diff line number Diff line change @@ -11,6 +11,7 @@ import (
11
11
"text/template"
12
12
13
13
"github.com/gookit/color"
14
+
14
15
"github.com/securego/gosec/v2"
15
16
"github.com/securego/gosec/v2/issue"
16
17
)
Original file line number Diff line number Diff line change @@ -3,8 +3,9 @@ package yaml
3
3
import (
4
4
"io"
5
5
6
- "github.com/securego/gosec/v2"
7
6
"gopkg.in/yaml.v3"
7
+
8
+ "github.com/securego/gosec/v2"
8
9
)
9
10
10
11
// WriteReport write a report in yaml format to the output writer
Original file line number Diff line number Diff line change 5
5
6
6
. "github.com/onsi/ginkgo/v2"
7
7
. "github.com/onsi/gomega"
8
+
8
9
"github.com/securego/gosec/v2"
9
10
"github.com/securego/gosec/v2/testutils"
10
11
)
Original file line number Diff line number Diff line change 6
6
7
7
. "github.com/onsi/ginkgo/v2"
8
8
. "github.com/onsi/gomega"
9
+
9
10
"github.com/securego/gosec/v2"
10
11
"github.com/securego/gosec/v2/issue"
11
12
)
Original file line number Diff line number Diff line change @@ -21,6 +21,7 @@ import (
21
21
"strconv"
22
22
23
23
zxcvbn "github.com/nbutton23/zxcvbn-go"
24
+
24
25
"github.com/securego/gosec/v2"
25
26
"github.com/securego/gosec/v2/issue"
26
27
)
Original file line number Diff line number Diff line change 6
6
7
7
. "github.com/onsi/ginkgo/v2"
8
8
. "github.com/onsi/gomega"
9
+
9
10
"github.com/securego/gosec/v2"
10
11
"github.com/securego/gosec/v2/rules"
11
12
"github.com/securego/gosec/v2/testutils"
Original file line number Diff line number Diff line change 8
8
"path"
9
9
"strings"
10
10
11
- "github.com/securego/gosec/v2"
12
11
"golang.org/x/tools/go/packages"
12
+
13
+ "github.com/securego/gosec/v2"
13
14
)
14
15
15
16
type buildObj struct {
You can’t perform that action at this time.
0 commit comments