mirror of
https://github.com/securego/gosec.git
synced 2024-12-24 11:35:52 +00:00
Update README file with a note on dependencies (#351)
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
This commit is contained in:
parent
e442cf30a8
commit
992f173356
1 changed files with 6 additions and 0 deletions
|
@ -132,6 +132,12 @@ of functions which will be skipped when auditing the not checked errors:
|
|||
}
|
||||
```
|
||||
|
||||
### Dependencies
|
||||
|
||||
gosec will fetch automatically the dependencies of the code which is being analyzed when go modules are turned on (e.g.` GO111MODULE=on`). If this is not the case,
|
||||
the dependencies need to be explicitly downloaded by running the `go get -d` command before the scan.
|
||||
|
||||
|
||||
### Excluding files
|
||||
|
||||
gosec will ignore tests files and any dependencies in your vendor directory. The scanning of these artifacts can be enabled with the following flags:
|
||||
|
|
Loading…
Reference in a new issue