gosec

build_samples.go

fix: build tag parsing. (#1413 )

2025-11-05 10:46:27 +01:00

cgo_samples.go

…

deps_test.go

chore(go): update supported Go versions to 1.25.8 and 1.26.1 (#1583 )

2026-03-06 09:27:20 +01:00

g101_samples.go

Fix URL regexp and remove redundant Google regex patterns (#1485 )

2026-01-28 10:28:52 +01:00

g102_samples.go

…

g103_samples.go

…

g104_samples.go

whitelist crypto/rand Read from error checks (#1446 )

2025-12-31 18:57:36 +02:00

g106_samples.go

…

g107_samples.go

…

g108_samples.go

…

g109_samples.go

…

g110_samples.go

…

g111_samples.go

…

g112_samples.go

Add support for //gosec:disable directive (#1314 )

2025-03-10 10:09:27 +01:00

g113_samples.go

Add G113: Detect HTTP Request Smuggling via conflicting headers (CVE-2025-22891, CWE-444) (#1515 )

2026-02-15 18:48:01 +01:00

g114_samples.go

…

g115_samples.go

Allow rune to byte conversion (#1642 )

2026-04-23 09:21:59 +02:00

g116_samples.go

feature: add rule for trojan source (#1431 )

2025-12-11 10:14:29 +01:00

g117_samples.go

fix: reduce G117 false positives for custom marshalers and transformed values (#1614 ) (#1615 )

2026-03-17 08:56:12 +01:00

g118_samples.go

fix(G118): eliminate false positive for package-level cancel variables (#1602 )

2026-03-12 17:16:02 +01:00

g119_samples.go

Add G119 analyzer for unsafe redirect header propagation in CheckRedirect callbacks (#1519 )

2026-02-16 14:40:53 +01:00

g120_samples.go

Port G120 from SSA-based to taint analysis (fixes #1600 , #1603 ) (#1605 )

2026-03-13 12:01:02 +01:00

g121_samples.go

Add G121 analyzer for unsafe CORS bypass patterns in CrossOriginProtection (#1521 )

2026-02-16 15:59:57 +01:00

g122_samples.go

Add G122 SSA analyzer for filepath.Walk/WalkDir symlink TOCTOU race risks (#1532 )

2026-02-20 19:24:17 +01:00

g123_samples.go

Add G123 analyzer for tls.VerifyPeerCertificate resumption bypass risk (#1534 )

2026-02-21 10:42:36 +01:00

g124_samples.go

feat: add G124 rule for insecure HTTP cookie configuration (#1599 )

2026-03-11 14:32:15 +01:00

g201_samples.go

feat(sql): enhance SQL injection detection with improved string concatenation checks (#1454 )

2026-01-06 14:30:54 +01:00

g202_samples.go

feat(sql): enhance SQL injection detection with improved string concatenation checks (#1454 )

2026-01-06 14:30:54 +01:00

g203_samples.go

…

g204_samples.go

feat(rules): enhance subprocess variable checks (#1453 )

2026-01-06 14:20:23 +01:00

g301_samples.go

…

g302_samples.go

…

g303_samples.go

…

g304_samples.go

test(g304): add samples for var perm and var flag with cleaned path\n\n- Ensure G304 does not fire when only non-path args (flag/perm) are variables\n- Both samples use filepath.Clean on the path arg\n- Rules suite remains green (42 passed)

2025-09-12 13:52:23 +00:00

g305_samples.go

…

g306_samples.go

…

g307_samples.go

…

g401_samples.go

…

g402_samples.go

Skip flaging the TLS min version for go 1.18+ (#1646 )

2026-04-25 10:06:56 +02:00

g403_samples.go

…

g404_samples.go

…

g405_samples.go

…

g406_samples.go

…

g407_samples.go

Fix incorrect detection of fixed iv in G407 (#1509 )

2026-02-14 14:15:55 +01:00

g408_samples.go

Add G408: SSH PublicKeyCallback Authentication Bypass Analyzer (#1513 )

2026-02-14 23:11:18 +01:00

g501_samples.go

fix: build tag parsing. (#1413 )

2025-11-05 10:46:27 +01:00

g502_samples.go

…

g503_samples.go

…

g504_samples.go

…

g505_samples.go

…

g506_samples.go

…

g507_samples.go

…

g601_samples.go

fix: build tag parsing. (#1413 )

2025-11-05 10:46:27 +01:00

g602_samples.go

Fix G602 regression coverage for issue #1545 and stabilize G117 TOML test dependency (#1546 )

2026-02-25 15:01:01 +01:00

g701_samples.go

Fix infinite recursion in interprocedural taint analysis (#1594 )

2026-03-09 17:52:52 +01:00

g702_samples.go

feat: Support for adding taint analysis engine (#1486 )

2026-02-10 15:47:11 +01:00

g703_samples.go

Add HTTP file-serving function to the skins of pathtraversal analyzer (#1647 )

2026-04-25 10:37:00 +02:00

g704_samples.go

fix(taint): gate *http.Request auto-taint on entry-point detection (#1630 )

2026-04-08 11:31:24 +02:00

g705_samples.go

fix(G705): eliminate false positive when guard type cannot be resolved (#1554 )

2026-02-28 09:04:39 +01:00

g706_samples.go

fix(G706): scope slog sinks to msg arg only to prevent false positives on structured attributes (#1623 )

2026-03-25 21:46:59 +01:00

g707_samples.go

Add G707 taint analyzer for SMTP command/header injection (#1535 )

2026-02-21 11:12:34 +01:00

g708_samples.go

feat: add G708 rule for server-side template injection via text/template (#1597 )

2026-03-11 11:03:55 +01:00

g709_samples.go

feat: add G709 rule for unsafe deserialization of untrusted data (#1598 )

2026-03-11 12:31:10 +01:00

g710_samples.go

Add G710 rule for open redirect via taint analysis (#1654 )

2026-04-26 09:38:45 +02:00

log.go

…

pkg.go

fix: build tag parsing. (#1413 )

2025-11-05 10:46:27 +01:00

sample_types.go

…

visitor.go

…