云微 602ced7e71

Fix wrong location for G109 (#829) ...

Before this commit, G109 will report on `strconv.Atoi`.
After this, it will report on the convertion like`int32(a)`.

2022-07-06 06:37:11 +02:00

..

archive.go

feat: adds support for path.Join and for tar archives in G305

2020-08-03 09:17:45 +02:00

bad_defer.go

Fix https://github.com/securego/gosec/issues/714 (#733)

2021-11-24 16:34:42 +01:00

bind.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

blocklist.go

Rename file for consistency

2020-06-29 13:52:47 +02:00

decompression-bomb.go

Add io.CopyBuffer function to rule G110

2020-07-29 14:25:45 +02:00

directory-traversal.go

Fix use rule IDs to retrieve the rule config

2022-03-28 20:28:02 +02:00

errors.go

Fix use rule IDs to retrieve the rule config

2022-03-28 20:28:02 +02:00

fileperms.go

Fix use rule IDs to retrieve the rule config

2022-03-28 20:28:02 +02:00

hardcoded_credentials.go

Fix use rule IDs to retrieve the rule config

2022-03-28 20:28:02 +02:00

implicit_aliasing.go

Improve the SQL concatenation and string formatting rules to be applied only in the database/sql context

2020-05-27 10:16:56 +02:00

integer_overflow.go

Fix wrong location for G109 (#829)

2022-07-06 06:37:11 +02:00

math_big_rat.go

Add check for usage of Rat.SetString in math/big with an overflow error (#819)

2022-06-03 00:19:51 +02:00

pprof.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

rand.go

Fix lint and fail on error in the ci build

2021-05-31 10:44:12 +02:00

readfile.go

Add os.Create to the readfile rule (#761)

2022-01-12 19:33:17 +01:00

rsa.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

rulelist.go

Add check for usage of Rat.SetString in math/big with an overflow error (#819)

2022-06-03 00:19:51 +02:00

rules_suite_test.go

Update to ginkgo v2 (#753)

2022-01-03 18:11:35 +01:00

rules_test.go

Add check for usage of Rat.SetString in math/big with an overflow error (#819)

2022-06-03 00:19:51 +02:00

slowloris.go

fix ReadTimeout for G112 rule

2022-06-23 14:58:13 +02:00

sql.go

Add db.Exec and db.Prepare to the sql rule (#763)

2022-01-17 13:50:37 +01:00

ssh.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

ssrf.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

subproc.go

Fix a panic in suproc rule when the declaration of the variable is not available in the AST (#728)

2021-11-16 21:41:26 +01:00

tempfiles.go

Find G303 with filepath.Join'd temp dirs (#754)

2022-01-04 14:48:02 +01:00

templates.go

Update the description message of template rule (#803)

2022-04-05 07:41:36 +02:00

tls_config.go

Update the tls configuration generate to handle also the NSS alternative names

2020-09-03 10:54:08 +02:00

tls.go

Resolve the TLS min version when is declarted in the same package but in a different file

2022-01-26 19:27:26 +01:00

unsafe.go

Handle properly the gosec module version v2

2020-04-06 09:06:23 -07:00

weakcrypto.go

Change naming rule from blacklist to blocklist

2020-06-29 13:45:44 +02:00