Cosmin CojocarandClaude Opus 4.6 355cfa5a43 fix: reduce G117 false positives for custom marshalers and transformed values (#1614) (#1615) ...

G117 now skips findings when:
- The marshal call is inside a custom marshaler method (MarshalJSON, MarshalYAML, etc.)
- The type being marshaled implements a custom marshaler interface
- A composite literal wraps the sensitive field value in a function call (e.g. mask())

Also fixes the issue message to show the correct format name (JSON/YAML/XML/TOML)
instead of always saying "JSON key".

Closes #1614

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-17 08:56:12 +01:00

..

archive.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

base.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

bind.go

feat: implement global cache usage in rules (#1480)

2026-01-26 13:29:03 +01:00

blocklist.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

decompression_bomb.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

directory_traversal.go

feat: implement global cache usage in rules (#1480)

2026-01-26 13:29:03 +01:00

errors.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

fileperms_test.go

Improve test coverage in various areas (#1511)

2026-02-14 16:48:39 +01:00

fileperms.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

hardcoded_credentials.go

Fix URL regexp and remove redundant Google regex patterns (#1485)

2026-01-28 10:28:52 +01:00

http_serve.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

implicit_aliasing_test.go

Improve test coverage in various areas (#1511)

2026-02-14 16:48:39 +01:00

implicit_aliasing.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

integer_overflow.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

pprof.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

rand.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

readfile.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

rsa.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

rulelist.go

Extend the G117 rule to cover other types of serialization such as yaml/xml/toml (#1529)

2026-02-18 22:27:02 +01:00

rules_suite_test.go

…

rules_test.go

feat: add secrets serialization G117 (#1451)

2026-01-04 17:21:22 +02:00

secret_serialization.go

fix: reduce G117 false positives for custom marshalers and transformed values (#1614) (#1615)

2026-03-17 08:56:12 +01:00

slowloris.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

sql.go

feat: implement global cache usage in rules (#1480)

2026-01-26 13:29:03 +01:00

ssh.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

ssrf.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

subproc.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

tempfiles.go

feat: implement global cache usage in rules (#1480)

2026-01-26 13:29:03 +01:00

templates.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

tls_config.go

Regenrate the TLS config rule (#1539)

2026-02-21 13:53:22 +01:00

tls.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

trojansource.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

unsafe.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00

weakcrypto.go

Refactor rules to use callListRule base structure (#1458)

2026-01-09 13:55:35 +01:00