Commit graph

914 commits

Author SHA1 Message Date
Josh Kaufman
514f65f3c3
Add G204 rule for sys/execabs (#660)
* Add G204 rule for sys/execabs

* syntax error in testutils/sources.go
2021-07-01 17:43:25 +02:00
renovate[bot]
e936c84a90
Update all dependencies (#658)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-28 16:09:51 +02:00
renovate[bot]
8c43b96d54
Update golang.org/x/crypto commit hash to 5ff15b2 (#656)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-21 10:51:01 +02:00
Vinod Anandan
5032f998a0
Generate SBOM (#655)
* Generate SBOM

* Update release.yml

* Update .github/workflows/release.yml

Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com>

* Publish bom.json

* Ignore SBOMs generated during CI

Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com>
2021-06-21 10:50:44 +02:00
Matthieu MOREL
03e876754d
Add security scan (#654)
* Add security scan

* Update scan.yml
2021-06-21 10:49:57 +02:00
Matthieu MOREL
01b12b43d4
Golangci : add linters (#653)
* Update .golangci.yml

* Update .golangci.yml
2021-06-18 13:47:05 +02:00
Cosmin Cojocar
3f800cc8ca
Fix the unit tests (#652)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
2021-06-17 14:56:27 +02:00
Cosmin Cojocar
df10b65136
Fix gosimple lint warning (#651)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
2021-06-17 14:39:47 +02:00
Matthieu MOREL
731d0d51ce
Results must always be present in the SARIF report (#650)
* Don't omit empty results

* Add tests
2021-06-17 14:21:42 +02:00
エガオノキミヘ
3c230ac0f7
errors.go: add Hash.Write() to the white list. (#648) 2021-06-13 13:30:49 +02:00
Matthieu MOREL
e72b1e5f25
Use of vars instead of func 2021-06-13 13:30:16 +02:00
renovate[bot]
c81cff094e
Update all dependencies (#646)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-13 13:29:17 +02:00
Matthieu MOREL
3ff0a2cc36
Fixes #644 (#645) 2021-06-13 13:28:53 +02:00
Matthieu MOREL
e3dffd6450
Update renovate configuration
* Add renovate.json

* Update renovate.json

* Update renovate.json

Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-02 09:40:22 +02:00
Matthieu MOREL
aa35eb5453
Delete renovate.json (#642) 2021-06-01 15:13:50 +02:00
Matthieu MOREL
3b1b77eb0c
add onboarding (#640) 2021-06-01 15:02:27 +02:00
Matthieu MOREL
03360baf89
Update renovate configuration 2021-06-01 14:20:18 +02:00
Cosmin Cojocar
8a8dbec703
Tidy up the dependencies (#637) 2021-06-01 09:58:09 +02:00
renovate[bot]
3a4d09b0b0
Update all dependencies (#635)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-01 09:43:14 +02:00
Matthieu MOREL
6cde6b3242
Disable cache in golangci job (#636)
* Update ci.yml

* Update ci.yml
2021-06-01 09:41:43 +02:00
Matthieu MOREL
1256f16f33
Fix lint and fail on error in the ci build 2021-05-31 10:44:12 +02:00
Matthieu MOREL
dbb9811e62
Add crypto and lint to the tools modules 2021-05-31 10:41:57 +02:00
Matthieu MOREL
244adc6bdc
Update the github ci action to use cache and matrix strategy 2021-05-31 10:40:47 +02:00
Matthieu MOREL
df1249d9b2
Update install.sh with more installation options 2021-05-31 10:39:11 +02:00
Matthieu MOREL
af27673a87
Update README.md 2021-05-28 09:19:31 +02:00
Matthieu MOREL
9fc8e20889
Add favicon for HTML template (#628)
* Add favicon for template

* Update template.go
2021-05-26 09:51:10 +02:00
Matthieu MOREL
91dae7fdce
Update the design of HTML report 2021-05-25 10:10:42 +02:00
Matthieu MOREL
e72f54ed40
Fix HTML template and display the gosec version 2021-05-21 11:14:43 +02:00
Marc Brugger
c3f25b8ab3
fix html report tag styling (#623) 2021-05-21 08:13:20 +02:00
Marc Brugger
433a67483a
show nosec in html report summary (#621) 2021-05-20 11:34:52 +02:00
Matthieu MOREL
d040f0725f
Handle gosec version in SARIF report 2021-05-20 10:16:42 +02:00
Matthieu MOREL
51f7411573
Add arm64 support (#618) 2021-05-18 22:48:59 +02:00
Matthieu MOREL
e7ac8829ba
Update go version to 1.16 (#616) 2021-05-17 09:52:14 +02:00
Matthieu MOREL
3a9a6ad8b3
Sarif provide Snippet with Issue.Code
* Provide Snippet with Issue.Code

* Fix documentation
2021-05-13 16:02:28 +02:00
Matthieu MOREL
1325319325
Create dependabot.yml (#614) 2021-05-13 16:01:22 +02:00
Matthieu MOREL
d8cfcd6e76
Allow the user to enable/disable colorisation of the text report in the stdout 2021-05-10 14:18:39 +02:00
Shreyas Subhedar
a8b633f124
Adding stdout and verbose flags and refactor how the report is saved 2021-05-10 10:44:55 +02:00
Matthieu MOREL
103c429df5
Enable golangcli and improve testing for formatters 2021-05-10 10:08:04 +02:00
Matthieu MOREL
4df7f1c3e9
Fix typos, Go Report link and Gofmt 2021-05-07 18:04:01 +02:00
Matthieu MOREL
f4ea33d5f8
Update how the test coverage is generated 2021-05-07 17:01:09 +02:00
Matthieu MOREL
c4f5932ab7
Refactor : Replace Cwe with cwe.Weakness 2021-05-07 16:54:34 +02:00
Matthieu MOREL
ddfa25381f
Define a report package with core and per format sub-packages 2021-05-06 09:31:51 +02:00
Matthieu MOREL
cc83d4c922
Generate the SARIF types, handle taxonomies and separate responsibilities 2021-05-05 18:54:32 +02:00
Cosmin Cojocar
0fa5d0b2d6
Fix the go modules after updating to get the tests passing (#605)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
2021-05-05 16:38:35 +02:00
Matthieu MOREL
37639537ce
Migrate sonar types in a dedicated package (#604) 2021-05-05 16:21:53 +02:00
renovate[bot]
b519743da6
chore(deps): update all dependencies (#599)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-05-03 09:52:24 +02:00
Jeff Widman
569328eade
Fix typos (#594) 2021-04-16 09:50:34 +02:00
Jeff Widman
0695fa026e
Add -u to local install instructions (#595)
`-u` will ensure that users are updated the latest released version.

This way bugs are less likely to be reported that are already fixed.
2021-04-16 09:50:10 +02:00
Cosmin Cojocar
7f2308bd85
Tidy up the moduels after updating (#593)
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
2021-04-01 09:49:25 +02:00
renovate[bot]
f21b0b8dac
chore(deps): update all dependencies (#592)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-01 09:16:31 +02:00