1
0
mirror of https://github.com/securego/gosec.git synced 2025-07-09 00:45:40 +02:00
Commit Graph

1143 Commits

Author SHA1 Message Date
e73248cc12 chore(deps): update all dependencies (#701)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-05 19:29:19 +02:00
c59cd6bb95 Update renovate.json (#699) 2021-09-19 23:24:39 +02:00
bfb0f422fe chore(lint): enable errorlint and gci (#698) 2021-09-13 09:40:10 +02:00
cb89567f99 chore(deps): update module github.com/lib/pq to v1.10.3 (#695)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-13 09:39:36 +02:00
1b2eecc8c4 Enable go 1.17 in the build and release workflows (#694)
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2021-09-02 14:59:49 +02:00
efbefc6930 fix: create a separate type for flag that has validation (#692) 2021-09-02 14:44:20 +02:00
1978a52ff4 Update all dependencies (#690)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-23 08:04:46 +02:00
fd5472caaf remove tabs (#689) 2021-08-20 10:27:45 +02:00
d3309fb4f5 Add a more generic message for rule g204 (#688) 2021-08-19 15:18:20 +02:00
b695b66e4d add key to Highlight component (#686) 2021-08-19 14:54:12 +02:00
aee782bfe8 add summary to html report (#687) 2021-08-19 14:53:39 +02:00
f285d612b5 Fix formatting issues with gofumpt (#685)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
2021-08-18 13:16:21 +02:00
ba23b5e49a Add possibility to list waived (nosec) marked issues but not count them as such 2021-08-18 13:00:38 +02:00
5a131be2ec fix: add more rules for G204 (#677)
* fix: add more rules for G204

* fix: add extra test and comment
2021-08-16 11:31:51 +02:00
9f30bb6602 Typo correction (#681)
Correcting the command flag from 'tag' to 'tags'
2021-08-16 11:29:35 +02:00
83355dc837 Update all dependencies (#683)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-16 11:28:27 +02:00
2d4133d7a1 Update module github.com/onsi/gomega to v1.15.0 (#679)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-09 17:29:21 +02:00
91447a45f5 Add SeatGeek to USERS.md (#678)
We just added gosec to our standard Golang tooling and pipelines.
2021-08-09 17:28:31 +02:00
c0c122cdc7 Add rule ID and CWE reference to the html report 2021-08-04 17:39:03 +02:00
62db81342e Allow excluding generated files 2021-08-04 17:33:20 +02:00
521e69ef66 Allows the exclude-dir option to exclude sub directories 2021-08-04 17:31:16 +02:00
d4dc2d2df5 Improve the G307 rule
* Add G307 sample code.
The sample should reflect a defered close that leads to data loss.
Due to IDE auto-complete people tend at least log errors, but not
really care about handling.

* Add more G307 sample code. Propose a way to implement

* Remove unused code. Add example that should not return an error but does

* Remove test for synced closed file for now.
Will add this later

Co-authored-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2021-07-31 23:03:09 +02:00
8b90c95c07 fix: BUILDFLAGS updated with correct versions information (#672) 2021-07-30 16:58:13 +02:00
5b3d23117c Update codecov/codecov-action action to v2 (#670)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-27 22:04:29 +02:00
9535c9e3e1 fix: add variable assignment checking as part of MinVersion (#669)
* fix: add variable assignment checking as part of MinVersion

* fix: add more code to allow assignment with const

* fix: rework the code and add more test cases for MinVersion

* fix: format linting issue using gofumpt
2021-07-27 22:03:59 +02:00
b869720342 Update module golang.org/x/tools to v0.1.5 (#668)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-19 11:26:21 +02:00
0ee8ad3d5b Use version ^v0 instead of latest for cyclonedx-gomod (#667)
To avoid breaking the build when cyclonedx-gomod introduces breaking changes in a new major version. See https://github.com/CycloneDX/gh-gomod-generate-sbom/releases/tag/v0.3.0

Signed-off-by: nscuro <nscuro@protonmail.com>
2021-07-19 11:25:04 +02:00
2a4064d45d feat: adding new keyword for hardcoded credentials (#666) 2021-07-19 11:23:39 +02:00
a484c77736 Update all dependencies (#663)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-13 18:43:09 +02:00
514f65f3c3 Add G204 rule for sys/execabs (#660)
* Add G204 rule for sys/execabs

* syntax error in testutils/sources.go
2021-07-01 17:43:25 +02:00
e936c84a90 Update all dependencies (#658)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-28 16:09:51 +02:00
8c43b96d54 Update golang.org/x/crypto commit hash to 5ff15b2 (#656)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-21 10:51:01 +02:00
5032f998a0 Generate SBOM (#655)
* Generate SBOM

* Update release.yml

* Update .github/workflows/release.yml

Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com>

* Publish bom.json

* Ignore SBOMs generated during CI

Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com>
2021-06-21 10:50:44 +02:00
03e876754d Add security scan (#654)
* Add security scan

* Update scan.yml
2021-06-21 10:49:57 +02:00
01b12b43d4 Golangci : add linters (#653)
* Update .golangci.yml

* Update .golangci.yml
2021-06-18 13:47:05 +02:00
3f800cc8ca Fix the unit tests (#652)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
v2.8.1
2021-06-17 14:56:27 +02:00
df10b65136 Fix gosimple lint warning (#651)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
2021-06-17 14:39:47 +02:00
731d0d51ce Results must always be present in the SARIF report (#650)
* Don't omit empty results

* Add tests
2021-06-17 14:21:42 +02:00
3c230ac0f7 errors.go: add Hash.Write() to the white list. (#648) 2021-06-13 13:30:49 +02:00
e72b1e5f25 Use of vars instead of func 2021-06-13 13:30:16 +02:00
c81cff094e Update all dependencies (#646)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-13 13:29:17 +02:00
3ff0a2cc36 Fixes #644 (#645) 2021-06-13 13:28:53 +02:00
e3dffd6450 Update renovate configuration
* Add renovate.json

* Update renovate.json

* Update renovate.json

Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-02 09:40:22 +02:00
aa35eb5453 Delete renovate.json (#642) 2021-06-01 15:13:50 +02:00
3b1b77eb0c add onboarding (#640) 2021-06-01 15:02:27 +02:00
03360baf89 Update renovate configuration 2021-06-01 14:20:18 +02:00
8a8dbec703 Tidy up the dependencies (#637) 2021-06-01 09:58:09 +02:00
3a4d09b0b0 Update all dependencies (#635)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-01 09:43:14 +02:00
6cde6b3242 Disable cache in golangci job (#636)
* Update ci.yml

* Update ci.yml
2021-06-01 09:41:43 +02:00
1256f16f33 Fix lint and fail on error in the ci build 2021-05-31 10:44:12 +02:00