Make G201 ignore CallExpr with no args (#262)

rules/sql.go

@@ -134,6 +134,11 @@ func (s *sqlStrFormat) Match(n ast.Node, c *gosec.Context) (*gosec.Issue, error)
 			}
 		}
 
+		// no formatter
+		if len(node.Args) == 0 {
+			return nil, nil
+		}
+
 		var formatter string
 
 		// concats callexpr arg strings together if needed before regex evaluation

testutils/source.go

@@ -309,6 +309,14 @@ func main(){
 		panic(err)
 	}
 	defer rows.Close()
+}`}, 0}, {[]string{`
+package main
+import (
+	"fmt"
+)
+
+func main(){
+	fmt.Sprintln()
 }`}, 0}}
 
 	// SampleCodeG202 - SQL query string building via string concatenation