actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-12-25 12:05:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
1076 commits 2 branches 41 tags 20 MiB
Commit graph

1076 commits

This branch
This branch
All branches
Author SHA1 Message Date
Phil Calçado
91447a45f5
Add SeatGeek to USERS.md (#678) 
We just added gosec to our standard Golang tooling and pipelines.
 2021-08-09 17:28:31 +02:00
Marc Brugger
c0c122cdc7
Add rule ID and CWE reference to the html report 2021-08-04 17:39:03 +02:00
Marc Brugger
62db81342e
Allow excluding generated files 2021-08-04 17:33:20 +02:00
Marc Brugger
521e69ef66
Allows the exclude-dir option to exclude sub directories 2021-08-04 17:31:16 +02:00
Lars
d4dc2d2df5
Improve the G307 rule 
* Add G307 sample code.
The sample should reflect a defered close that leads to data loss.
Due to IDE auto-complete people tend at least log errors, but not
really care about handling.

* Add more G307 sample code. Propose a way to implement

* Remove unused code. Add example that should not return an error but does

* Remove test for synced closed file for now.
Will add this later

Co-authored-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
 2021-07-31 23:03:09 +02:00
Nanik
8b90c95c07
fix: BUILDFLAGS updated with correct versions information (#672) 2021-07-30 16:58:13 +02:00
renovate[bot]
5b3d23117c
Update codecov/codecov-action action to v2 (#670) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-07-27 22:04:29 +02:00
Nanik
9535c9e3e1
fix: add variable assignment checking as part of MinVersion (#669) 
* fix: add variable assignment checking as part of MinVersion

* fix: add more code to allow assignment with const

* fix: rework the code and add more test cases for MinVersion

* fix: format linting issue using gofumpt
 2021-07-27 22:03:59 +02:00
renovate[bot]
b869720342
Update module golang.org/x/tools to v0.1.5 (#668) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-07-19 11:26:21 +02:00
Niklas
0ee8ad3d5b
Use version ^v0 instead of latest for cyclonedx-gomod (#667) 
To avoid breaking the build when cyclonedx-gomod introduces breaking changes in a new major version. See https://github.com/CycloneDX/gh-gomod-generate-sbom/releases/tag/v0.3.0

Signed-off-by: nscuro <nscuro@protonmail.com>
 2021-07-19 11:25:04 +02:00
Nanik
2a4064d45d
feat: adding new keyword for hardcoded credentials (#666) 2021-07-19 11:23:39 +02:00
renovate[bot]
a484c77736
Update all dependencies (#663) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-07-13 18:43:09 +02:00
Josh Kaufman
514f65f3c3
Add G204 rule for sys/execabs (#660) 
* Add G204 rule for sys/execabs

* syntax error in testutils/sources.go
 2021-07-01 17:43:25 +02:00
renovate[bot]
e936c84a90
Update all dependencies (#658) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-06-28 16:09:51 +02:00
renovate[bot]
8c43b96d54
Update golang.org/x/crypto commit hash to 5ff15b2 (#656) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-06-21 10:51:01 +02:00
Vinod Anandan
5032f998a0
Generate SBOM (#655) 
* Generate SBOM

* Update release.yml

* Update .github/workflows/release.yml

Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com>

* Publish bom.json

* Ignore SBOMs generated during CI

Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com>
 2021-06-21 10:50:44 +02:00
Matthieu MOREL
03e876754d
Add security scan (#654) 
* Add security scan

* Update scan.yml
 2021-06-21 10:49:57 +02:00
Matthieu MOREL
01b12b43d4
Golangci : add linters (#653) 
* Update .golangci.yml

* Update .golangci.yml
 2021-06-18 13:47:05 +02:00
Cosmin Cojocar
3f800cc8ca
Fix the unit tests (#652) 
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
 2021-06-17 14:56:27 +02:00
Cosmin Cojocar
df10b65136
Fix gosimple lint warning (#651) 
Signed-off-by: Cosmin Cojocar <ccojocar@cloudbees.com>
 2021-06-17 14:39:47 +02:00
Matthieu MOREL
731d0d51ce
Results must always be present in the SARIF report (#650) 
* Don't omit empty results

* Add tests
 2021-06-17 14:21:42 +02:00
エガオノキミヘ
3c230ac0f7
errors.go: add Hash.Write() to the white list. (#648) 2021-06-13 13:30:49 +02:00
Matthieu MOREL
e72b1e5f25
Use of vars instead of func 2021-06-13 13:30:16 +02:00
renovate[bot]
c81cff094e
Update all dependencies (#646) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-06-13 13:29:17 +02:00
Matthieu MOREL
3ff0a2cc36
Fixes #644 (#645) 2021-06-13 13:28:53 +02:00
Matthieu MOREL
e3dffd6450
Update renovate configuration 
* Add renovate.json

* Update renovate.json

* Update renovate.json

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-06-02 09:40:22 +02:00
Matthieu MOREL
aa35eb5453
Delete renovate.json (#642) 2021-06-01 15:13:50 +02:00
Matthieu MOREL
3b1b77eb0c
add onboarding (#640) 2021-06-01 15:02:27 +02:00
Matthieu MOREL
03360baf89
Update renovate configuration 2021-06-01 14:20:18 +02:00
Cosmin Cojocar
8a8dbec703
Tidy up the dependencies (#637) 2021-06-01 09:58:09 +02:00
renovate[bot]
3a4d09b0b0
Update all dependencies (#635) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-06-01 09:43:14 +02:00
Matthieu MOREL
6cde6b3242
Disable cache in golangci job (#636) 
* Update ci.yml

* Update ci.yml
 2021-06-01 09:41:43 +02:00
Matthieu MOREL
1256f16f33
Fix lint and fail on error in the ci build 2021-05-31 10:44:12 +02:00
Matthieu MOREL
dbb9811e62
Add crypto and lint to the tools modules 2021-05-31 10:41:57 +02:00
Matthieu MOREL
244adc6bdc
Update the github ci action to use cache and matrix strategy 2021-05-31 10:40:47 +02:00
Matthieu MOREL
df1249d9b2
Update install.sh with more installation options 2021-05-31 10:39:11 +02:00
Matthieu MOREL
af27673a87
Update README.md 2021-05-28 09:19:31 +02:00
Matthieu MOREL
9fc8e20889
Add favicon for HTML template (#628) 
* Add favicon for template

* Update template.go
 2021-05-26 09:51:10 +02:00
Matthieu MOREL
91dae7fdce
Update the design of HTML report 2021-05-25 10:10:42 +02:00
Matthieu MOREL
e72f54ed40
Fix HTML template and display the gosec version 2021-05-21 11:14:43 +02:00
Marc Brugger
c3f25b8ab3
fix html report tag styling (#623) 2021-05-21 08:13:20 +02:00
Marc Brugger
433a67483a
show nosec in html report summary (#621) 2021-05-20 11:34:52 +02:00
Matthieu MOREL
d040f0725f
Handle gosec version in SARIF report 2021-05-20 10:16:42 +02:00
Matthieu MOREL
51f7411573
Add arm64 support (#618) 2021-05-18 22:48:59 +02:00
Matthieu MOREL
e7ac8829ba
Update go version to 1.16 (#616) 2021-05-17 09:52:14 +02:00
Matthieu MOREL
3a9a6ad8b3
Sarif provide Snippet with Issue.Code 
* Provide Snippet with Issue.Code

* Fix documentation
 2021-05-13 16:02:28 +02:00
Matthieu MOREL
1325319325
Create dependabot.yml (#614) 2021-05-13 16:01:22 +02:00
Matthieu MOREL
d8cfcd6e76
Allow the user to enable/disable colorisation of the text report in the stdout 2021-05-10 14:18:39 +02:00
Shreyas Subhedar
a8b633f124
Adding stdout and verbose flags and refactor how the report is saved 2021-05-10 10:44:55 +02:00
Matthieu MOREL
103c429df5
Enable golangcli and improve testing for formatters 2021-05-10 10:08:04 +02:00