1
0
mirror of https://github.com/securego/gosec.git synced 2025-07-17 01:12:33 +02:00
Commit Graph

443 Commits

Author SHA1 Message Date
d72cee8663 Add quiet mode
When -quiet is specified on the command line we will only show issues
when issues were found.

Fixes #55
2016-11-04 11:38:00 -07:00
9fa0b726a0 Merge pull request #67 from GoASTScanner/use_types
Add MatchCall helper that utilizes type checker
2016-11-04 11:28:23 -07:00
c4057545ae Add MatchCall helper that utilizes type checker
This introduces a helper function that will significantly reduce the
number of false positives that occur due to the use of regexp based
call matching.

It resolves the object related to a CallExpr and checks that against the
supplied package and identifier name. If both of these match the
returned value is the CallExpr and Object.
2016-11-04 11:20:28 -07:00
9e2abd500f Merge pull request #66 from csstaub/cs/html-output
Add support for HTML output
2016-11-03 21:15:17 -07:00
aadcf8dbdb Merge pull request #60 from tam7t/fix-rand
rand: resolve math/rand package
2016-11-03 21:14:21 -07:00
4ff59153ec rand: refactor to use types package 2016-11-03 23:08:03 -04:00
75e0e1aa42 rand: resolve math/rand package 2016-11-03 19:21:12 -04:00
068e8a85ad Merge pull request #65 from GoASTScanner/sql_fix
Confirmed correct behavior for SQL tests
2016-11-02 19:20:07 -07:00
d60a2b4ebb Confirmed correct behavior for SQL tests
Closes #64
2016-11-02 17:46:59 -07:00
853b097922 Merge pull request #63 from GoASTScanner/travis_ci
Add go vet to travis-ci
2016-11-02 17:15:46 -07:00
686927c894 Address go vet failure in SQL rule 2016-11-02 17:12:23 -07:00
344ebd1ab6 Add go vet to travis-ci 2016-11-02 17:03:24 -07:00
65d572f193 Merge pull request #62 from GoASTScanner/correct_imports
Updated imports to new repository location.
2016-11-02 16:58:28 -07:00
74b6633ee0 Updated imports to new repository location. 2016-11-02 16:54:20 -07:00
b8ce40e193 Remove debugging println 2016-11-02 16:25:13 -07:00
4cd269f3a6 Merge pull request #58 from levigross/master
Make sure to exit 1 if we find an issue
2016-10-31 15:09:43 -07:00
9c3c102127 Fixed comment 2016-10-31 10:16:03 -04:00
b92fa02ff4 Make sure to exit 1 if we find an issue
Signed-off-by: Levi Gross <levi@levigross.com>
2016-10-29 20:22:08 -04:00
fadc6d443d Merge pull request #52 from gcmurphy/use_glob
Refactor path matching logic
2016-10-26 18:22:22 +02:00
b8e78c644b Merge pull request #56 from s7v7nislands/fix_unsafe
Fix unsafe
2016-10-25 01:19:16 -07:00
eedb0c279d fix fmt 2016-10-25 12:08:59 +08:00
92dda9cc3b fix unsafe check 2016-10-25 11:57:05 +08:00
911c69646d Add support for HTML output 2016-10-21 13:18:56 -07:00
59fbf7446d Refactor path matching logic
Effectively using filepath.Glob to build a set of files and directories
to exclude from the scan.

(ref: https://golang.org/pkg/path/filepath/#Glob)
2016-09-10 14:55:12 -07:00
a4fd848bfc Merge pull request #49 from gcmurphy/master
Add godocs.org reference
2016-09-06 10:19:50 +01:00
7f4bdd5957 Merge pull request #48 from gcmurphy/godoc
Fix typos in godocs
2016-09-06 10:19:33 +01:00
d05a2416a2 MatcMatchCompLit should be MatchCompList 2016-08-28 11:44:14 -07:00
b5a98c12a8 Add godocs.org bagdge 2016-08-28 11:36:53 -07:00
9ca975d56f Add gas to .gitignore 2016-08-28 11:35:58 -07:00
0ee8e1bbab Merge pull request #47 from gcmurphy/readme
Readme updates
2016-08-28 11:24:44 -07:00
0bce1770b5 Fix typos in godocs 2016-08-28 11:22:08 -07:00
bb42840644 Merge pull request #42 from HewlettPackard/code_docs
Adding some inline documentation  for godoc
2016-08-28 11:17:05 -07:00
e4b1e28f53 Merge pull request #46 from drewwells/feature/exclusions
prefix patterns with **/ to match subdirectories
2016-08-28 11:15:29 -07:00
a2b7f3e0a2 Add LICENSE information to README.md 2016-08-28 11:09:52 -07:00
929edb490a Update README.md to use rule ID's 2016-08-28 11:07:28 -07:00
365ae31b3a prefix patterns with **/ to match subdirectories 2016-08-24 12:36:00 -05:00
223cded656 Adding some inline documentation for godoc 2016-08-12 14:17:28 +01:00
37205e9afa Merge pull request #41 from HewlettPackard/usage
Fix usage information
2016-08-11 16:54:36 +01:00
df373b8659 Fix usage information
Mostly a tidy up. Fixed a couple of spelling errors as well.
2016-08-11 05:14:19 -07:00
82947bb1a8 Merge pull request #39 from HewlettPackard/rule_selection
Rule selection rules
2016-08-11 04:58:25 -07:00
713949fe69 Rule selection rules
This makes the following changes:
- riles are identified by an ID
- include / exclude list now work
- rules are selected based on these lists
- blacklist rules are broken out into methods
- rule constructors now take the config map
- config file can be used to select rules
- CLI options embelish config selection options
2016-08-11 10:45:51 +01:00
51ffe1ba7e Merge pull request #40 from dragonndev/master
Clarified output format options.
2016-08-10 14:59:19 -07:00
b29e45fa7e Merge pull request #38 from HewlettPackard/cli_docs
Updating docs for new CLI "skip" option
2016-08-10 14:58:09 -07:00
5b867f204b Clarified output format options. 2016-08-10 11:43:02 -07:00
6d831c0923 Updating docs for new CLI "skip" option 2016-08-10 10:09:37 +01:00
235308f853 Merge pull request #35 from HewlettPackard/config_cli
Configuration
2016-08-08 08:27:02 -07:00
e3b1d33b95 Configuration
This re-works the way that CLI options are passed through to the
analyzer so that they can act as overrides for config options. If
not given on the CLI, options will come from a config file. If no
file is used then a default value is chosen.

Two lists are also populated with tests to include or exclude.
These lists are not used for now but will eventually replace the
way we select test to run in a future patch to follow.
2016-08-08 16:18:46 +01:00
4e30ca3866 Merge pull request #37 from HewlettPackard/travis_ci
Add build status to README.md
2016-08-08 09:24:58 +01:00
9521472897 Add build status to README.md 2016-08-05 09:54:29 -07:00
58e6823122 Merge pull request #36 from HewlettPackard/travis_ci
Add travis ci profile
2016-08-05 17:10:50 +01:00