actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2025-03-01 12:43:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
1133 commits 6 branches 43 tags 21 MiB
Commit graph

210 commits

Author SHA1 Message Date
renovate[bot]
aaae242d8b
chore(deps): update all dependencies 2025-02-24 01:58:43 +00:00
renovate[bot]
89c5da3ce0
chore(deps): update module google.golang.org/api to v0.221.0 (#1305) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-17 09:49:10 +01:00
renovate[bot]
9552f0372d
chore(deps): update all dependencies (#1300)
Some checks failed
CI / test (map[go:1.22.12 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.6 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
* chore(deps): update all dependencies

* Remove the toolchain version

Change-Id: Ia459abe63b2b15167dd51a9a75b222178d7664b6
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>

---------

Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
 2025-02-11 09:54:07 +01:00
renovate[bot]
2258e3108d
chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
Some checks failed
CI / test (map[go:1.22.11 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.5 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-03 09:51:05 +01:00
renovate[bot]
fbb08336de
chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
Some checks failed
CI / test (map[go:1.22.11 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.5 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-27 09:21:30 +01:00
renovate[bot]
7466b7cad2
chore(deps): update all dependencies (#1290) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-20 09:16:55 +01:00
renovate[bot]
534689b08f
chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
Some checks are pending
CI / coverage (push) Blocked by required conditions
Details
Security Scan / build (push) Waiting to run
Details
CI / test (map[go:1.22.10 golangci:latest]) (push) Waiting to run
Details
CI / test (map[go:1.23.4 golangci:latest]) (push) Waiting to run
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-06 09:51:27 +01:00
renovate[bot]
eb95db1c76
chore(deps): update all dependencies (#1280)
Some checks failed
CI / test (map[go:1.22.10 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.4 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-30 15:47:51 +01:00
renovate[bot]
6c6da403f0
chore(deps): update all dependencies (#1279)
Some checks failed
Security Scan / build (push) Has been cancelled
Details
CI / test (map[go:1.22.10 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.4 golangci:latest]) (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-23 09:38:16 +01:00
renovate[bot]
9a2d74ffe0
chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-19 10:52:50 +01:00
Oleksandr Redko
bc77d16301
Remove unused golint dependency (#1266) 2024-12-16 10:41:16 +01:00
renovate[bot]
1bd92a8e30
chore(deps): update all dependencies (#1268) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-16 10:34:38 +01:00
renovate[bot]
329cad89ee
chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-12 10:08:44 +01:00
renovate[bot]
08beb25d41
chore(deps): update all dependencies (#1261)
Some checks failed
CI / test (map[go:1.22.9 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.3 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-09 10:42:25 +01:00
renovate[bot]
d566be274e
chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
Some checks failed
CI / test (map[go:1.22.9 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.3 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-02 10:09:45 +01:00
Oleksandr Redko
8c602d0bc4
fix: revive.redefines-builtin-id lint warnings (#1257)
Some checks failed
CI / test (map[go:1.22.9 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.3 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: Cosmin Cojocar <cosmin@cojocar.ch>
 2024-11-30 10:54:57 +01:00
renovate[bot]
08ea2a57db chore(deps): update all dependencies
Some checks are pending
CI / test (map[go:1.22.8 golangci:latest]) (push) Waiting to run
Details
CI / test (map[go:1.23.2 golangci:latest]) (push) Waiting to run
Details
CI / coverage (push) Blocked by required conditions
Details
Security Scan / build (push) Waiting to run
Details
2024-11-25 11:21:19 +01:00
renovate[bot]
44156135bf chore(deps): update all dependencies
Some checks failed
CI / test (map[go:1.22.8 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.2 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-11-18 09:46:28 +01:00
renovate[bot]
3274716ce3 chore(deps): update all dependencies
Some checks failed
CI / test (map[go:1.22.8 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.2 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-11-11 09:28:10 +01:00
renovate[bot]
1fb6a46eed chore(deps): update all dependencies
Some checks failed
CI / test (map[go:1.22.8 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.2 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-11-04 10:11:47 +01:00
renovate[bot]
d2c92ed7b3 chore(deps): update all dependencies
Some checks failed
CI / test (map[go:1.22.8 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.2 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-10-28 09:23:35 +01:00
renovate[bot]
1501618b90 chore(deps): update module google.golang.org/api to v0.201.0
Some checks failed
CI / test (map[go:1.22.7 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.1 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-10-21 10:44:17 +02:00
renovate[bot]
7d33bc1991 chore(deps): update all dependencies
Some checks failed
CI / test (map[go:1.22.7 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.1 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-10-14 08:52:45 +02:00
renovate[bot]
bd8b4b4ece chore(deps): update all dependencies
Some checks failed
CI / test (map[go:1.22.7 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.1 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details
2024-10-07 11:06:29 +02:00
renovate[bot]
50d1b4ae6b chore(deps): update module google.golang.org/api to v0.199.0 2024-10-01 16:51:00 +02:00
renovate[bot]
d4617f51ba
chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
Some checks failed
CI / test (map[go:1.22.7 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.1 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-09-23 09:30:44 +02:00
renovate[bot]
3004932005
chore(deps): update all dependencies (#1223)
Some checks failed
CI / test (map[go:1.22.7 golangci:latest]) (push) Has been cancelled
Details
CI / test (map[go:1.23.1 golangci:latest]) (push) Has been cancelled
Details
Security Scan / build (push) Has been cancelled
Details
CI / coverage (push) Has been cancelled
Details 
* chore(deps): update all dependencies

* Update go.mod

* Remove the toolchain directive

Change-Id: I2ecbdec86e3eb8a771232f649f6da2273b3026ac
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>

---------

Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cosmin Cojocar <cosmin@cojocar.ch>
Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
 2024-09-16 10:42:08 +02:00
renovate[bot]
5e53c8b9f7
chore(deps): update all dependencies (#1215) 
* chore(deps): update all dependencies

* Update go.mod

* Update go.mod

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cosmin Cojocar <cosmin@cojocar.ch>
 2024-09-09 15:20:27 +02:00
czechbol
eaedce9a8b
Improvement the int conversion overflow logic to handle bound checks (#1194) 
* add test cases

Signed-off-by: czechbol <adamludes@gmail.com>

* fix bounds check logic

Signed-off-by: czechbol <adamludes@gmail.com>

* tweak test cases

Signed-off-by: czechbol <adamludes@gmail.com>

* fix codestyle

Signed-off-by: czechbol <adamludes@gmail.com>

* improve bounds check logic

Signed-off-by: czechbol <adamludes@gmail.com>

* max recursion depth

Signed-off-by: czechbol <adamludes@gmail.com>

* add test case for len function

Signed-off-by: czechbol <adamludes@gmail.com>

* relax len function bounds checks

Co-authored-by: Ben Krieger <ben.krieger@intel.com>

* handle cases when convert instruction is after the if blocks

Signed-off-by: czechbol <adamludes@gmail.com>

* improve range check discovery, add tests

Signed-off-by: czechbol <adamludes@gmail.com>

* refactor for readability

Signed-off-by: czechbol <adamludes@gmail.com>

* add cap function test

Signed-off-by: czechbol <adamludes@gmail.com>

* calculate signed min without throwing overflow warnings

Signed-off-by: czechbol <adamludes@gmail.com>

* perform bounds checks int size calculations

Signed-off-by: czechbol <adamludes@gmail.com>

* basic equal operator logic

Signed-off-by: czechbol <adamludes@gmail.com>

* uintptr -> unsafe.Pointer test case

Signed-off-by: czechbol <adamludes@gmail.com>

* fix review comments

Signed-off-by: czechbol <adamludes@gmail.com>

* Rebase and fix go module

Change-Id: I8da6495eaaf25b1739389aa98492bd7df338085b
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>

* fix false positive for negated value

Signed-off-by: czechbol <adamludes@gmail.com>

* fix range conditions

Signed-off-by: czechbol <adamludes@gmail.com>

* Ignore the golangci/gosec G115 warning

Change-Id: I0db56cb0a5f9ab6e815e2480ec0b66d7061b23d3
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>

---------

Signed-off-by: czechbol <adamludes@gmail.com>
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
Co-authored-by: Ben Krieger <ben.krieger@intel.com>
Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
 2024-09-04 16:09:54 +02:00
Cosmin Cojocar
11d69032b0 Update go.mod to sue go 1.22.0 toolchain 2024-09-02 09:46:29 +02:00
renovate[bot]
655527dfb4 chore(deps): update all dependencies 2024-09-02 09:46:29 +02:00
Cosmin Cojocar
71e397b994 Update go.mod 2024-08-26 16:47:36 +02:00
renovate[bot]
aec45b0b7d chore(deps): update all dependencies 2024-08-26 16:47:36 +02:00
Cosmin Cojocar
18135b439c
Update to Go 1.23.0 (#1183) 
Change-Id: I11a6402e85ac543305e8bad4ea35239779424dd6

Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
 2024-08-19 09:17:50 +02:00
renovate[bot]
91c708a620
chore(deps): update all dependencies (#1182) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-19 08:58:30 +02:00
Tran The Lam
56f943b802
Add support to generate auto fixes using LLM (AI) (#1177) 
This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers.

---------

Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com>
Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
 2024-08-12 12:52:41 +02:00
renovate[bot]
f33fd4bf29 chore(deps): update all dependencies 2024-08-12 10:21:07 +02:00
renovate[bot]
55a47f3774 chore(deps): update all dependencies 2024-08-05 17:38:32 +02:00
renovate[bot]
a5d9ef67e2 chore(deps): update all dependencies 2024-07-29 10:58:28 +02:00
renovate[bot]
466992feca chore(deps): update all dependencies 2024-07-08 15:49:41 +02:00
renovate[bot]
30a8a9c8c3 chore(deps): update all dependencies 2024-06-11 21:31:12 +02:00
renovate[bot]
45fbb27d87 chore(deps): update all dependencies 2024-05-27 13:03:14 +02:00
renovate[bot]
b633c4c0ec chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3 2024-05-20 10:36:33 +02:00
renovate[bot]
d34f8b77d5 chore(deps): update all dependencies 2024-05-13 14:19:10 +02:00
renovate[bot]
d3b2359ae2 chore(deps): update module golang.org/x/text to v0.15.0 2024-05-06 12:35:14 +02:00
renovate[bot]
cf29d543e2 chore(deps): update all dependencies 2024-05-02 10:27:10 +02:00
renovate[bot]
09d62bd630 chore(deps): update module github.com/onsi/gomega to v1.33.0 2024-04-22 09:11:31 +02:00
renovate[bot]
31009c3db8 chore(deps): update all dependencies 2024-04-08 11:41:11 +02:00
renovate[bot]
daf6f670f7 chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 2024-04-02 09:51:47 +02:00
renovate[bot]
e27f442499 chore(deps): update all dependencies 2024-03-25 11:02:28 +01:00