bean.zhang a624254e39

Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917) ...

* Update hardcoded_credentials.go

adaper equal expr which const value at left.
```
if "Tr0ub4dour_UPL&&LOlo" == pwd
```

* Update hardcoded_credentials.go

check ident not equal nil

* adapter const == key hardcoded, add testcases

2023-01-31 09:52:37 +01:00

..

archive.go

feat: adds support for path.Join and for tar archives in G305

2020-08-03 09:17:45 +02:00

bad_defer.go

Additional types for bad defer check (#897)

2022-11-30 09:38:46 +01:00

bind.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

blocklist.go

Rename file for consistency

2020-06-29 13:52:47 +02:00

decompression-bomb.go

Add io.CopyBuffer function to rule G110

2020-07-29 14:25:45 +02:00

directory-traversal.go

Fix use rule IDs to retrieve the rule config

2022-03-28 20:28:02 +02:00

errors.go

Fix use rule IDs to retrieve the rule config

2022-03-28 20:28:02 +02:00

fileperms_test.go

fileperms: bitwise permission comparison (#883)

2022-10-20 08:48:40 +02:00

fileperms.go

fileperms: bitwise permission comparison (#883)

2022-10-20 08:48:40 +02:00

hardcoded_credentials.go

Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)

2023-01-31 09:52:37 +01:00

http_serve.go

Detect use of net/http functions that have no support for setting timeouts (#842)

2022-08-02 17:16:44 +02:00

implicit_aliasing.go

Improve the SQL concatenation and string formatting rules to be applied only in the database/sql context

2020-05-27 10:16:56 +02:00

integer_overflow.go

Fix wrong location for G109 (#829)

2022-07-06 06:37:11 +02:00

math_big_rat.go

Add check for usage of Rat.SetString in math/big with an overflow error (#819)

2022-06-03 00:19:51 +02:00

pprof.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

rand.go

Fix lint and fail on error in the ci build

2021-05-31 10:44:12 +02:00

readfile.go

Update Go version in CI script (#913)

2023-01-09 16:49:02 +01:00

rsa.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

rulelist.go

Detect use of net/http functions that have no support for setting timeouts (#842)

2022-08-02 17:16:44 +02:00

rules_suite_test.go

Update to ginkgo v2 (#753)

2022-01-03 18:11:35 +01:00

rules_test.go

Detect use of net/http functions that have no support for setting timeouts (#842)

2022-08-02 17:16:44 +02:00

slowloris.go

fix ReadTimeout for G112 rule

2022-06-23 14:58:13 +02:00

sql.go

Refactor SQL rules for better extensibility (#841)

2022-08-02 15:25:30 +02:00

ssh.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

ssrf.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

subproc.go

fix G204 bugs (#835)

2022-07-26 11:08:43 +02:00

tempfiles.go

Find G303 with filepath.Join'd temp dirs (#754)

2022-01-04 14:48:02 +01:00

templates.go

Update the description message of template rule (#803)

2022-04-05 07:41:36 +02:00

tls_config.go

Fix the TLS config rule when parsing the settings from a variable (#911)

2023-01-09 15:10:44 +01:00

tls.go

Fix the TLS config rule when parsing the settings from a variable (#911)

2023-01-09 15:10:44 +01:00

unsafe.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

weakcrypto.go

Change naming rule from blacklist to blocklist

2020-06-29 13:45:44 +02:00