actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-11-05 19:45:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
gosec/go.mod

64 lines
2.6 KiB
Modula-2
Raw Normal View History

Handle properly the gosec module version v2 Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2020-04-01 21:18:39 +01:00
module github.com/securego/gosec/v2
Support Go 1.11 (#239) * Test with the latest minor version of each major Go version * Support Go 1.11 and modules
2018-09-10 08:09:12 +01:00
require (
chore(deps): update all dependencies
2024-01-22 01:36:12 +00:00
github.com/ccojocar/zxcvbn-go v1.0.2
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
github.com/google/generative-ai-go v0.17.0
chore(deps): update all dependencies
2024-01-29 00:55:35 +00:00
github.com/google/uuid v1.6.0
chore(deps): update all dependencies (#989) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-24 09:01:22 +01:00
github.com/gookit/color v1.5.4
chore(deps): update all dependencies (#955) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-05-03 08:46:14 +01:00
github.com/lib/pq v1.10.9
Update all dependencies (#646) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-13 12:29:17 +01:00
github.com/mozilla/tls-observatory v0.0.0-20210609171429-7bc42856d2e5
chore(deps): update all dependencies
2024-09-02 02:33:04 +01:00
github.com/onsi/ginkgo/v2 v2.20.2
github.com/onsi/gomega v1.34.2
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
github.com/stretchr/testify v1.9.0
chore(deps): update all dependencies
2024-08-12 02:20:20 +01:00
golang.org/x/crypto v0.26.0
Improvement the int conversion overflow logic to handle bound checks (#1194) * add test cases Signed-off-by: czechbol <adamludes@gmail.com> * fix bounds check logic Signed-off-by: czechbol <adamludes@gmail.com> * tweak test cases Signed-off-by: czechbol <adamludes@gmail.com> * fix codestyle Signed-off-by: czechbol <adamludes@gmail.com> * improve bounds check logic Signed-off-by: czechbol <adamludes@gmail.com> * max recursion depth Signed-off-by: czechbol <adamludes@gmail.com> * add test case for len function Signed-off-by: czechbol <adamludes@gmail.com> * relax len function bounds checks Co-authored-by: Ben Krieger <ben.krieger@intel.com> * handle cases when convert instruction is after the if blocks Signed-off-by: czechbol <adamludes@gmail.com> * improve range check discovery, add tests Signed-off-by: czechbol <adamludes@gmail.com> * refactor for readability Signed-off-by: czechbol <adamludes@gmail.com> * add cap function test Signed-off-by: czechbol <adamludes@gmail.com> * calculate signed min without throwing overflow warnings Signed-off-by: czechbol <adamludes@gmail.com> * perform bounds checks int size calculations Signed-off-by: czechbol <adamludes@gmail.com> * basic equal operator logic Signed-off-by: czechbol <adamludes@gmail.com> * uintptr -> unsafe.Pointer test case Signed-off-by: czechbol <adamludes@gmail.com> * fix review comments Signed-off-by: czechbol <adamludes@gmail.com> * Rebase and fix go module Change-Id: I8da6495eaaf25b1739389aa98492bd7df338085b Signed-off-by: Cosmin Cojocar <ccojocar@google.com> * fix false positive for negated value Signed-off-by: czechbol <adamludes@gmail.com> * fix range conditions Signed-off-by: czechbol <adamludes@gmail.com> * Ignore the golangci/gosec G115 warning Change-Id: I0db56cb0a5f9ab6e815e2480ec0b66d7061b23d3 Signed-off-by: Cosmin Cojocar <ccojocar@google.com> --------- Signed-off-by: czechbol <adamludes@gmail.com> Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: Ben Krieger <ben.krieger@intel.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-09-04 15:09:54 +01:00
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
Update all dependencies (#635) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-01 08:43:14 +01:00
golang.org/x/lint v0.0.0-20210508222113-6edffad5e616
chore(deps): update all dependencies
2024-08-12 02:20:20 +01:00
golang.org/x/text v0.17.0
golang.org/x/tools v0.24.0
chore(deps): update all dependencies
2024-09-02 02:33:04 +01:00
google.golang.org/api v0.195.0
chore(deps): update all dependencies (#909) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-01-09 08:27:57 +00:00
gopkg.in/yaml.v3 v3.0.1
Support Go 1.11 (#239) * Test with the latest minor version of each major Go version * Support Go 1.11 and modules
2018-09-10 08:09:12 +01:00
)
Update golang.org/x/tools commit hash to 6bfd74c (#365)
2019-09-12 13:07:35 +01:00
chore(deps): update all dependencies (#836) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-07-26 09:57:36 +01:00
require (
chore(deps): update all dependencies
2024-08-26 01:27:26 +01:00
cloud.google.com/go v0.115.1 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
cloud.google.com/go/ai v0.8.0 // indirect
chore(deps): update all dependencies
2024-08-26 01:27:26 +01:00
cloud.google.com/go/auth v0.9.1 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.4 // indirect
chore(deps): update all dependencies (#1182) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-19 07:58:30 +01:00
cloud.google.com/go/compute/metadata v0.5.0 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
cloud.google.com/go/longrunning v0.5.7 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
chore(deps): update all dependencies
2024-07-29 01:06:46 +01:00
github.com/go-logr/logr v1.4.2 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
github.com/go-logr/stdr v1.2.2 // indirect
chore(deps): update all dependencies
2024-04-30 04:45:33 +01:00
github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
chore(deps): update module github.com/onsi/gomega to v1.28.1
2023-10-23 04:23:45 +01:00
github.com/google/go-cmp v0.6.0 // indirect
chore(deps): update all dependencies
2024-09-02 02:33:04 +01:00
github.com/google/pprof v0.0.0-20240827171923-fa2c70bbbfe5 // indirect
chore(deps): update all dependencies (#1182) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-19 07:58:30 +01:00
github.com/google/s2a-go v0.1.8 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
chore(deps): update all dependencies (#1182) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-19 07:58:30 +01:00
github.com/googleapis/gax-go/v2 v2.13.0 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/stretchr/objx v0.5.2 // indirect
chore(deps): update all dependencies (#836) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-07-26 09:57:36 +01:00
github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
go.opencensus.io v0.24.0 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.51.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.51.0 // indirect
go.opentelemetry.io/otel v1.26.0 // indirect
go.opentelemetry.io/otel/metric v1.26.0 // indirect
go.opentelemetry.io/otel/trace v1.26.0 // indirect
chore(deps): update all dependencies
2024-08-12 02:20:20 +01:00
golang.org/x/mod v0.20.0 // indirect
golang.org/x/net v0.28.0 // indirect
chore(deps): update all dependencies (#1182) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-19 07:58:30 +01:00
golang.org/x/oauth2 v0.22.0 // indirect
chore(deps): update all dependencies
2024-08-12 02:20:20 +01:00
golang.org/x/sync v0.8.0 // indirect
chore(deps): update all dependencies
2024-08-26 01:27:26 +01:00
golang.org/x/sys v0.24.0 // indirect
chore(deps): update all dependencies (#1182) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-19 07:58:30 +01:00
golang.org/x/time v0.6.0 // indirect
chore(deps): update all dependencies
2024-08-26 01:27:26 +01:00
google.golang.org/genproto/googleapis/api v0.0.0-20240725223205-93522f1f2a9f // indirect
chore(deps): update all dependencies
2024-09-02 02:33:04 +01:00
google.golang.org/genproto/googleapis/rpc v0.0.0-20240823204242-4ba0660f739c // indirect
chore(deps): update all dependencies
2024-08-26 01:27:26 +01:00
google.golang.org/grpc v1.65.0 // indirect
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
google.golang.org/protobuf v1.34.2 // indirect
chore(deps): update all dependencies (#836) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-07-26 09:57:36 +01:00
)
Update to Go 1.23.0 (#1183) Change-Id: I11a6402e85ac543305e8bad4ea35239779424dd6 Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-19 08:17:50 +01:00
go 1.22
Add support to generate auto fixes using LLM (AI) (#1177) This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
2024-08-12 11:52:41 +01:00
Update go.mod to sue go 1.22.0 toolchain
2024-09-02 08:27:12 +01:00
toolchain go1.22.0
Reference in a new issue Copy permalink