mirror of
https://github.com/securego/gosec.git
synced 2026-06-20 00:15:59 +02:00
Cosmin Cojocar
5b580c76e4
This PR adds regression coverage for the G602 false-positive reported in issue #1545 by introducing two sample cases: one valid range-over-array indexing pattern that should not trigger, and one true out-of-bounds variant that should still be detected. It also fixes test instability in the rules suite by adding the missing BurntSushi TOML module metadata required by G117 sample compilation in the test harness. Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>
62 lines
2.4 KiB
AMPL
62 lines
2.4 KiB
AMPL
module github.com/securego/gosec/v2
|
|
|
|
require (
|
|
github.com/anthropics/anthropic-sdk-go v1.26.0
|
|
github.com/ccojocar/zxcvbn-go v1.0.4
|
|
github.com/google/uuid v1.6.0
|
|
github.com/gookit/color v1.6.0
|
|
github.com/lib/pq v1.11.2
|
|
github.com/mozilla/tls-observatory v0.0.0-20250923143331-eef96233227e
|
|
github.com/onsi/ginkgo/v2 v2.28.1
|
|
github.com/onsi/gomega v1.39.1
|
|
github.com/openai/openai-go/v3 v3.23.0
|
|
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
|
|
github.com/stretchr/testify v1.11.1
|
|
go.yaml.in/yaml/v3 v3.0.4
|
|
golang.org/x/crypto v0.48.0
|
|
golang.org/x/sync v0.19.0
|
|
golang.org/x/text v0.34.0
|
|
golang.org/x/tools v0.42.0
|
|
google.golang.org/genai v1.47.0
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go v0.121.2 // indirect
|
|
cloud.google.com/go/auth v0.16.5 // indirect
|
|
cloud.google.com/go/compute/metadata v0.8.0 // indirect
|
|
github.com/BurntSushi/toml v0.3.1 // indirect
|
|
github.com/Masterminds/semver/v3 v3.4.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 // indirect
|
|
github.com/google/s2a-go v0.1.9 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.15.0 // indirect
|
|
github.com/gorilla/websocket v1.5.3 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/stretchr/objx v0.5.2 // indirect
|
|
github.com/tidwall/gjson v1.18.0 // indirect
|
|
github.com/tidwall/match v1.1.1 // indirect
|
|
github.com/tidwall/pretty v1.2.1 // indirect
|
|
github.com/tidwall/sjson v1.2.5 // indirect
|
|
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
|
|
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
|
|
go.opentelemetry.io/otel v1.37.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.37.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.37.0 // indirect
|
|
golang.org/x/mod v0.33.0 // indirect
|
|
golang.org/x/net v0.50.0 // indirect
|
|
golang.org/x/sys v0.41.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c // indirect
|
|
google.golang.org/grpc v1.75.0 // indirect
|
|
google.golang.org/protobuf v1.36.8 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|
|
|
|
go 1.25.0
|