Add a rule which detects when pprof endpoint is automatically exposed

Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>

testutils/source.go

@@ -404,6 +404,23 @@ func main() {
     	}
       	fmt.Println(resp.Status)
 }`}, 0, gosec.NewConfig()}}
+	// SampleCodeG108 - pprof endpoint automatically exposed
+	SampleCodeG108 = []CodeSample{{[]string{`
+package main
+
+import (
+	"fmt"
+	"log"
+	"net/http"
+	_ "net/http/pprof"
+)
+
+func main() {
+	http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
+		fmt.Fprintf(w, "Hello World!")
+	})
+	log.Fatal(http.ListenAndServe(":8080", nil))
+}`}, 1, gosec.NewConfig()}}
 	// SampleCodeG201 - SQL injection via format string
 	SampleCodeG201 = []CodeSample{
 		{[]string{`