go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2026-06-20 00:15:59 +02:00
Code Issues Releases Activity
1,323 Commits 4 Branches 67 Tags
f8691bd77bab5430ccb538e6f253275e82577afc
Commit Graph
267 Commits
Author SHA1 Message Date
Ravi Sastry Kadali 1341aeadb4 fix(G705): eliminate false positive for non-HTTP io.Writer (#1550) 
* fix(G705): eliminate false positive for non-HTTP io.Writer

Adds ArgTypeGuards map[int]string to taint.Sink. The XSS analyzer now
requires arg[0] of fmt.Fprint* to implement net/http.ResponseWriter.
Writing exec pipe output to os.Stdout no longer triggers G705.

Fixes: #1548

* improve code coverage
 2026-02-27 08:01:14 +01:00
Cosmin Cojocar 5b580c76e4 Fix G602 regression coverage for issue #1545 and stabilize G117 TOML test dependency (#1546) 
This PR adds regression coverage for the G602 false-positive reported in
issue #1545 by introducing two sample cases: one valid range-over-array
indexing pattern that should not trigger, and one true out-of-bounds
variant that should still be detected.

It also fixes test instability in the rules suite by adding the missing
BurntSushi TOML module metadata required by G117 sample compilation in
the test harness.

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>
 2026-02-25 15:01:01 +01:00
renovate[bot] fea9725934 chore(deps): update all dependencies (#1541) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-24 14:24:16 +01:00
Cosmin Cojocar e34e8dd8e8 Extend the G117 rule to cover other types of serialization such as yaml/xml/toml (#1529) 
Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>
 2026-02-18 22:27:02 +01:00
renovate[bot] cec54ec685 chore(deps): update all dependencies (#1517) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-16 13:56:41 +01:00
Cosmin Cojocar 8668b74892 Add support for go 1.26.x and removed support for go 1.24.x (#1508) 
We keep support only for two major version.

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>
 2026-02-14 13:53:19 +01:00
renovate[bot] 181a7cb072 chore(deps): update all dependencies (#1494) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-09 19:56:07 +01:00
renovate[bot] e2fa6ab0ba chore(deps): update all dependencies (#1488) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-07 12:01:23 +01:00
renovate[bot] 04f729ce53 chore(deps): update module google.golang.org/genai to v1.43.0 (#1484) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-26 13:27:17 +01:00
renovate[bot] 6897b3661c chore(deps): update all dependencies (#1473) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-19 12:07:51 +01:00
renovate[bot] 303f84d111 chore(deps): update all dependencies (#1461) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-12 09:51:22 +01:00
renovate[bot] 095d529a90 chore(deps): update all dependencies (#1443) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-30 10:18:39 +02:00
renovate[bot] 25804378cd chore(deps): update all dependencies (#1440) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-16 09:22:49 +01:00
Bo-Yi WuCosmin CojocarCosmin Cojocar
 		aa2e2fb1bd feat(ai): add OpenAI and custom API provider support (#1424) 
* feat(ai): add OpenAI and custom API provider support

- Expand AI provider support to include OpenAI (gpt-4o, gpt-4o-mini) and custom OpenAI-compatible APIs
- Add support for configuring AI API base URL and skipping SSL verification
- Update documentation to list all supported AI providers and clarify configuration options with examples
- Refactor AI client initialization to fallback on OpenAI-compatible API for unknown models
- Add OpenAI client implementation using openai-go library
- Update tests to validate OpenAI-compatible fallback behavior
- Add openai-go dependency to go.mod

Signed-off-by: appleboy <appleboy.tw@gmail.com>

* Fix info message after merge

Change-Id: I1cb556a42e2bd9e9b2051d6db99889c6c9f7ccdb
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>

* Fix lint warning

Change-Id: I3689b96205f494920dbbd03344e8f132a30f40b3
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>

---------

Signed-off-by: appleboy <appleboy.tw@gmail.com>
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
Co-authored-by: Cosmin Cojocar <cosmin@cojocar.ch>
Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
 2025-12-11 09:53:19 +01:00
wei dong b6eea26df8 chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1437) 
Signed-off-by: weidongkl <weidong@uniontech.com>
 2025-12-10 10:02:30 +01:00
renovate[bot] 41f28e209a chore(deps): update module google.golang.org/genai to v1.37.0 (#1435) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-08 10:25:31 +01:00
renovate[bot] fde7515239 chore(deps): update all dependencies (#1425) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-02 09:31:48 +01:00
renovate[bot] 7aa7e93872 chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (#1428) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-24 16:02:08 +01:00
Sebastian Rühl 8a5d01aca5 test: add sarif validation (#1417) 2025-11-10 10:12:07 +01:00
renovate[bot] a8fefd17f7 chore(deps): update all dependencies (#1421) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-10 10:10:57 +01:00
renovate[bot] d2d734859c chore(deps): update all dependencies (#1411) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-03 10:03:44 +01:00
renovate[bot] afa853e9eb chore(deps): update all dependencies (#1409) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-10-27 13:59:17 +01:00
renovate[bot] 6b2e6e45a6 chore(deps): update all dependencies (#1408) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-10-20 14:51:49 +02:00
renovate[bot] fddb9427b8 chore(deps): update all dependencies (#1402) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-10-13 09:54:49 +02:00
renovate[bot] 35f7ec2ca2 chore(deps): update all dependencies (#1399) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-10-06 10:06:01 +02:00
Cosmin Cojocar 761fcbc36c Keep the go module at 1.24 version for compatibility reasons 
Change-Id: I4a572ee651896232fe4b5d51b9ee9b4896ee0f50
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
 2025-10-02 10:35:04 +00:00
Cosmin Cojocar 2238079261 Remove manual test deps 
It is not required anymore to install the test dependencies seprately.
They are now managed by the go module file.

Change-Id: I67bb8ca4619e36477a62b24692b795e16c89397b
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
 2025-10-02 10:35:04 +00:00
renovate[bot] 0d8255e75e chore(deps): update all dependencies 2025-09-29 07:58:47 +00:00
Matteo Calabrò 64ebfc0106 feat(autofix): update gemini sdk and add anthropic claude 
* upgrade gemini sdk to google.golang.org/genai v1.25.0
* support newer gemini models
* add anthropic claude
 2025-09-22 08:24:39 +00:00
renovate[bot] 3ead143f0a chore(deps): update all dependencies 2025-09-15 07:25:27 +00:00
renovate[bot] 4be6b11bbc chore(deps): update all dependencies 2025-09-08 11:06:08 +00:00
renovate[bot] 5af1117217 chore(deps): update all dependencies 2025-08-25 08:18:38 +00:00
renovate[bot] 287b46c018 chore(deps): update all dependencies 2025-08-18 07:59:10 +00:00
Cosmin Cojocar c9453023c4 Add support for go version 1.25.0 
Change-Id: Ia694411be7e861177970485cc6185af5a6944686
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
 2025-08-14 12:38:12 +00:00
renovate[bot] e201bb86c2 chore(deps): update all dependencies 2025-08-11 08:54:42 +00:00
renovate[bot] ba592afef6 chore(deps): update all dependencies 2025-07-28 09:33:21 +00:00
renovate[bot] 925741b7ef chore(deps): update module google.golang.org/api to v0.242.0 2025-07-21 08:06:50 +00:00
renovate[bot] 59ae7e9e27 chore(deps): update all dependencies 2025-07-14 08:59:55 +00:00
renovate[bot] e7abd9e348 chore(deps): update all dependencies 2025-07-07 10:04:42 +02:00
renovate[bot] 35e7bc1a94 chore(deps): update all dependencies 2025-06-30 10:33:36 +02:00
renovate[bot] 2d1ed95a0b chore(deps): update all dependencies 2025-06-23 11:35:00 +02:00
Cosmin Cojocar d2d3ae66bd Switch back go.mod to minimum 1.23.0 
Change-Id: Ic3f843d866a21a6595e1dc9c97416f2a22172299
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
 2025-06-16 11:50:02 +02:00
Cosmin Cojocar 1e7ed06b15 Update dependencies 
Change-Id: Ifccf358fa941a51f6b9e817311dc4a49ee9afb6f
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
 2025-06-16 11:50:02 +02:00
renovate[bot] 621702f13a chore(deps): update all dependencies 2025-06-10 10:39:08 +02:00
renovate[bot] 67f63d4781 chore(deps): update module google.golang.org/api to v0.235.0 2025-06-02 10:04:14 +02:00
renovate[bot] b4eabb1b18 chore(deps): update module google.golang.org/api to v0.234.0 2025-05-26 16:03:16 +03:00
renovate[bot] 52a80ff4bd chore(deps): update module google.golang.org/api to v0.233.0 2025-05-20 10:08:10 +02:00
renovate[bot] e2a95069d9 chore(deps): update module google.golang.org/api to v0.232.0 2025-05-12 09:48:04 +02:00
renovate[bot] 270b5ce868 chore(deps): update all dependencies 2025-05-06 09:44:05 +02:00
renovate[bot] 65d2d9f011 chore(deps): update module google.golang.org/api to v0.230.0 2025-04-28 12:27:29 +02:00