gosec

actions/gosec

Fork 0

mirror of https://github.com/securego/gosec.git synced 2024-12-26 12:35:52 +00:00

Commit graph

Select branches

Hide pull requests

ai-api-key-env

master

#10

#1000

#1002

#1003

#1006

#1008

#1009

#101

#1011

#1012

#1015

#1016

#1017

#102

#1020

#1021

#1022

#1023

#1026

#1027

#1028

#1029

#1033

#1034

#1035

#1037

#1038

#1039

#104

#1042

#1043

#1045

#1047

#1050

#1051

#1053

#1055

#1056

#1057

#1058

#1059

#1062

#1063

#1064

#1065

#1068

#1069

#1070

#1072

#1075

#1076

#1078

#1079

#1080

#1084

#1085

#1086

#1087

#1088

#1089

#109

#1091

#1095

#1096

#1097

#1098

#11

#110

#1100

#1101

#1102

#1103

#1104

#1107

#1108

#1111

#1112

#1113

#1114

#1117

#1118

#1119

#112

#1120

#1123

#1124

#1125

#1128

#1131

#1132

#1135

#1136

#1137

#1138

#1139

#114

#1142

#1144

#1145

#1147

#1148

#1149

#115

#1151

#1152

#1153

#1154

#1155

#1159

#1161

#1163

#1164

#1165

#1167

#1168

#1169

#1170

#1171

#1172

#1176

#1177

#1178

#1179

#118

#1180

#1181

#1182

#1183

#1186

#1188

#1189

#1190

#1191

#1192

#1193

#1194

#1197

#1201

#1203

#1207

#1208

#121

#1210

#1213

#1215

#1216

#1217

#1218

#122

#1221

#1223

#1225

#1226

#1227

#1228

#123

#123

#1231

#1232

#1233

#1235

#1236

#1238

#1239

#1242

#1245

#1246

#1248

#1249

#125

#1251

#1252

#1253

#1254

#1255

#1256

#1257

#1258

#1259

#1261

#1262

#1263

#1264

#1265

#1266

#1267

#1268

#1269

#1270

#1271

#1272

#1273

#1274

#1275

#1276

#1277

#1279

#128

#129

#133

#135

#136

#137

#137

#138

#139

#139

#14

#142

#146

#147

#147

#149

#150

#151

#151

#152

#154

#156

#160

#161

#162

#163

#164

#165

#166

#167

#168

#170

#175

#176

#176

#177

#178

#179

#18

#180

#180

#181

#182

#182

#183

#185

#186

#187

#188

#189

#189

#19

#191

#195

#198

#199

#20

#200

#201

#206

#206

#207

#207

#208

#21

#211

#214

#215

#216

#217

#219

#22

#220

#221

#222

#223

#225

#227

#228

#23

#231

#232

#233

#235

#236

#238

#239

#24

#240

#245

#246

#247

#248

#249

#251

#254

#256

#26

#261

#262

#263

#266

#27

#273

#274

#275

#276

#277

#279

#281

#282

#284

#285

#286

#288

#29

#290

#297

#30

#30

#300

#301

#302

#306

#307

#308

#309

#31

#310

#311

#312

#313

#316

#317

#318

#32

#320

#322

#326

#328

#33

#330

#332

#334

#339

#34

#346

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#395

#398

#399

#4

#40

#400

#402

#403

#405

#407

#409

#41

#410

#412

#417

#42

#421

#422

#426

#427

#428

#429

#431

#432

#433

#434

#435

#437

#441

#442

#443

#444

#445

#446

#449

#450

#452

#454

#455

#457

#459

#46

#460

#462

#463

#464

#466

#467

#47

#471

#472

#473

#474

#476

#477

#478

#479

#48

#480

#481

#483

#484

#485

#487

#489

#49

#491

#493

#495

#497

#498

#499

#5

#500

#503

#508

#509

#510

#513

#514

#516

#519

#52

#520

#521

#522

#524

#527

#529

#530

#531

#532

#533

#536

#538

#539

#544

#545

#546

#547

#553

#554

#555

#557

#558

#559

#56

#561

#562

#565

#566

#570

#572

#573

#575

#577

#58

#581

#583

#584

#585

#586

#590

#592

#593

#594

#595

#599

#6

#60

#601

#602

#604

#605

#606

#607

#608

#609

#610

#611

#613

#614

#615

#616

#618

#619

#62

#620

#621

#623

#624

#625

#626

#628

#629

#63

#631

#632

#633

#634

#635

#636

#637

#638

#640

#641

#642

#643

#645

#646

#647

#648

#65

#650

#651

#652

#653

#654

#655

#656

#658

#66

#660

#661

#663

#665

#666

#667

#668

#669

#67

#670

#672

#673

#674

#676

#677

#678

#679

#68

#680

#681

#683

#685

#686

#687

#688

#689

#69

#690

#692

#694

#695

#698

#699

#70

#701

#702

#703

#706

#707

#708

#71

#710

#712

#715

#716

#717

#718

#719

#72

#722

#724

#725

#728

#73

#731

#733

#734

#735

#737

#738

#739

#740

#741

#744

#745

#747

#748

#75

#751

#752

#753

#754

#755

#757

#758

#759

#76

#761

#763

#764

#765

#769

#770

#771

#772

#774

#775

#777

#778

#779

#781

#784

#786

#788

#789

#790

#791

#793

#795

#796

#798

#799

#800

#802

#803

#805

#806

#808

#809

#81

#810

#811

#812

#814

#816

#817

#818

#819

#82

#822

#824

#825

#826

#828

#829

#83

#830

#834

#835

#836

#837

#838

#839

#840

#841

#842

#844

#845

#846

#849

#854

#855

#857

#859

#86

#860

#863

#864

#865

#866

#867

#868

#869

#871

#872

#873

#874

#875

#876

#88

#880

#881

#882

#883

#884

#886

#887

#888

#889

#89

#89

#892

#894

#895

#896

#897

#898

#90

#902

#903

#904

#905

#906

#907

#909

#91

#910

#911

#912

#913

#914

#916

#917

#918

#92

#920

#921

#922

#923

#924

#927

#929

#93

#931

#932

#934

#935

#936

#938

#940

#942

#943

#944

#945

#946

#947

#948

#950

#951

#952

#953

#955

#956

#957

#958

#959

#960

#962

#963

#964

#967

#968

#969

#97

#970

#971

#973

#974

#975

#976

#977

#98

#981

#982

#983

#984

#986

#987

#989

#99

#991

#992

#993

#997

#998

1.0.0

1.1.0

1.2.0

1.3.0

2.0.0

v2.1.0

v2.10.0

v2.11.0

v2.12.0

v2.13.0

v2.13.1

v2.14.0

v2.15.0

v2.16.0

v2.17.0

v2.18.0

v2.18.1

v2.18.2

v2.19.0

v2.2.0

v2.20.0

v2.21.0

v2.21.1

v2.21.2

v2.21.3

v2.21.4

v2.3.0

v2.4.0

v2.5.0

v2.6.0

v2.6.1

v2.7.0

v2.8.0

v2.8.1

v2.9.0

v2.9.1

v2.9.2

v2.9.3

v2.9.4

v2.9.5

v2.9.6

674c6eb82d Improve the TLS version checking Cosmin Cojocar 2020-06-23 11:34:08 +0200
15b0956963 Make sure some version information is set when no version was injected into the binary Cosmin Cojocar 2020-06-19 10:28:01 +0200
1d2c951f2c Extend the rule G304 with os.OpenFile and add a test to cover it Cosmin Cojocar 2020-06-16 13:29:03 +0200
883fd84a01 Extend the rule G304 with os.OpenFile and add a test to cover it Cosmin Cojocar 2020-06-16 13:29:03 +0200
0c1a71b8a1 Add more tests samples to increase coverage Cosmin Cojocar 2020-06-15 12:26:56 +0200
fe07fcf276 Fix unit test when checking a mix of good and bad random functions Cosmin Cojocar 2020-06-15 12:10:08 +0200
6bbf8f9cbc Extend the insecure random rule with more insecure random functions Cosmin Cojocar 2020-06-15 12:00:13 +0200
feb9c40a99 Add more tests samples to increase coverage Cosmin Cojocar 2020-06-15 12:26:56 +0200
020ee0d18a Fix unit test when checking a mix of good and bad random functions Cosmin Cojocar 2020-06-15 12:10:08 +0200
06065533f7 Extend the insecure random rule with more insecure random functions Cosmin Cojocar 2020-06-15 12:00:13 +0200
af699f6a62

Exclude .git directory from scan (#485) Hiroaki Sano 2020-06-09 22:16:27 +0900
6360db547b Exclude .git directory from scan Hiroaki Sano 2020-06-09 21:47:06 +0900
6202b38a44

Update all dependencies (#484) renovate[bot] 2020-06-02 09:31:29 +0200
e5de00897d

Update all dependencies Renovate Bot 2020-06-02 06:47:08 +0000
6a130d55b3

Update the link pointing to issues to CWE mapping to use the master version (#483) Cosmin Cojocar 2020-05-28 14:40:15 +0200
33752e0407 Update the link pointing to issues to CWE mapping to use the master version Cosmin Cojocar 2020-05-28 14:39:36 +0200
826db1cfec

Fix the build tags propagation Lukas Aron 2020-05-27 20:42:19 +1000
7938e81afa BugFix-369 Comments added Lukas Aron 2020-05-27 20:34:28 +1000
6e6e1c007a BugFix-369 Comments added Lukas Aron 2020-05-27 20:33:31 +1000
121b9012b3 BugFix-369 Tags are propagated. Lukas Aron 2020-05-27 20:30:25 +1000
b95dac43c7 Merge branch 'master' into BugFix-393 Lukas Aron 2020-05-27 20:11:35 +1000
7da9248ce6 Change the issue test to verify that a multi-line finding contains a line range Cosmin Cojocar 2020-05-26 09:05:24 +0200
7aedcc56ab Remove print line from tests Cosmin Cojocar 2020-05-25 15:46:59 +0200
30e93bf865 Improve the SQL strings concat rules to handle multiple string concatenation Cosmin Cojocar 2020-05-25 15:42:43 +0200
68bce94323 Improve the SQL concatenation and string formatting rules to be applied only in the database/sql context Cosmin Cojocar 2020-05-25 14:19:00 +0200
6d356926d0 Change the issue test to verify that a multi-line finding contains a line range Cosmin Cojocar 2020-05-26 09:05:24 +0200
a581a87563 Remove print line from tests Cosmin Cojocar 2020-05-25 15:46:59 +0200
7e4948f1ea Improve the SQL strings concat rules to handle multiple string concatenation Cosmin Cojocar 2020-05-25 15:42:43 +0200
9d92f4e2a9 Improve the SQL concatenation and string formatting rules to be applied only in the database/sql context Cosmin Cojocar 2020-05-25 14:19:00 +0200
32be4a5cc6 Make sure all rules are mapped to CWE numbers Cosmin Cojocar 2020-05-25 16:12:01 +0200
94962bc80a Make sure all rules are mapped to CWE numbers Cosmin Cojocar 2020-05-25 16:12:01 +0200
ad5f92e8c6 BugFix-369 code cleaned Lukas Aron 2020-05-25 14:45:36 +1000
a9de2af8ea BugFix-393 Build tags are propagated Lukas Aron 2020-05-24 00:16:05 +1000
5b11e7e7a6 BugFix-369 SQL Regex support case-insensitivity Lukas Aron 2020-05-23 22:20:32 +1000
8630c43b66 Add null pointer check in G601 Grant Murphy 2020-05-21 01:17:44 +1000
175da21978 Add null pointer check in G601 Grant Murphy 2020-05-21 01:17:44 +1000
1418b856ea ondisk -> onDisk Lukas Aron 2020-05-18 17:35:14 +1000
b2cfc5d638 USERS.md type in the title fixed. Lukas Aron 2020-05-16 07:58:00 +1000
a744de0c0f ondisk -> onDisk Lukas Aron 2020-05-18 17:35:14 +1000
76753b8b08 USERS.md type in the title fixed. Lukas Aron 2020-05-16 07:58:00 +1000
425b8f9531 Display a sponsor button in the repository Cosmin Cojocar 2020-05-14 08:50:38 +0200
ac972e53f0

Display a sponsor button in the repository Cosmin Cojocar 2020-05-14 08:50:38 +0200
0714a1e62a Update the users file with some more projects and companies Cosmin Cojocar 2020-05-08 12:57:35 +0200
1b915ddad7 Set up a gosec's users list Cosmin Cojocar 2020-05-08 10:14:32 +0200
9fd5b1f45a Update the users file with some more projects and companies Cosmin Cojocar 2020-05-08 12:57:35 +0200
f36055ddaf Set up a gosec's users list Cosmin Cojocar 2020-05-08 10:14:32 +0200
668512fc5c Update bad_defer.go Vitaly Velikodny 2020-05-06 17:17:27 +0300
3916e09d90

Update bad_defer.go Vitaly Velikodny 2020-05-06 17:17:27 +0300
ee3146e637 Rule which detects aliasing of values in RangeStmt v2.3.0 Caccavale 2019-12-19 12:39:33 -0500
ce87709a94 Rule which detects aliasing of values in RangeStmt Caccavale 2019-12-19 12:39:33 -0500
8662624e28 Update the build badge to ge the status from GitHub workflow Cosmin Cojocar 2020-04-20 12:19:47 +0200
5129590f23 Update the build badge to ge the status from GitHub workflow Cosmin Cojocar 2020-04-20 12:19:47 +0200
a5db4e1f04 Run mod tidy to clean up the dependencies Cosmin Cojocar 2020-04-20 10:10:05 +0200
fb44007c6e Enhance the hardcoded credentials rule to check the equality and non-equality of strings Cosmin Cojocar 2020-04-17 15:47:27 +0200
4a68b28893 Run mod tidy to clean up the dependencies Cosmin Cojocar 2020-04-20 10:10:05 +0200
47842baebf Enhance the hardcoded credentials rule to check the equality and non-equality of strings Cosmin Cojocar 2020-04-17 15:47:27 +0200
a2a40de847 Update the README with an example to configure the hard-coded credentials rule Cosmin Cojocar 2020-04-15 16:13:40 +0200
802292c54f Fix the configuration parsing for hardcoded credentials Cosmin Cojocar 2020-04-15 16:10:21 +0200
ca4704b12d Update the README with an example to configure the hard-coded credentials rule Cosmin Cojocar 2020-04-15 16:13:40 +0200
785e685fb1 Fix the configuration parsing for hardcoded credentials Cosmin Cojocar 2020-04-15 16:10:21 +0200
c58f3563d3 Set the default color on only for text format Cosmin Cojocar 2020-04-14 18:32:48 +0200
d33aeed06e Set the default color on only for text format Cosmin Cojocar 2020-04-14 18:32:48 +0200
1a113d6da9 Turn the color always on when the text format is set Cosmin Cojocar 2020-04-14 10:51:21 +0200
c4417de46d Use the latest color package to get the color working with tmux Cosmin Cojocar 2020-04-14 10:39:16 +0200
904e5c69b5 Turn the color always on when the text format is set Cosmin Cojocar 2020-04-14 10:51:21 +0200
f84dffb17b Use the latest color package to get the color working with tmux Cosmin Cojocar 2020-04-14 10:39:16 +0200
656691b387

feature(formatter/text): Add color option on text format (#460) Marco Antônio Singer 2020-04-14 04:50:02 -0300
51e4317f09 Automate the release process using a GitHub workflow Cosmin Cojocar 2020-04-09 13:01:40 +0200
060c9fd5bc refactor(formatter): Passing color flag forward Marco Singer 2020-04-10 20:02:50 -0300
78353d26d1 feature(main): Add color flag Marco Singer 2020-04-10 19:58:46 -0300
c0373d5ad5 feature(formatter): Highlight issues based on severity Marco Singer 2020-04-10 19:35:03 -0300
4c5175e64f feature(formatter): Add color output for text format Marco Singer 2020-04-10 19:30:12 -0300
ced3103881 docs(formatter/CreateReport): Update formats accepted Marco Singer 2020-04-10 19:13:23 -0300
9967003e8d feature(issue): Add function to return file path and line number Marco Singer 2020-04-10 19:09:53 -0300
9f34ca2d3c Automate the release process using a GitHub workflow Cosmin Cojocar 2020-04-09 13:01:40 +0200
341059e11a Update the GitHub action name to be more desriptive Cosmin Cojocar 2020-04-08 09:40:50 +0200
3b6c3f13f1 Update README with some instruction how to run gosec as a GitHub action Cosmin Cojocar 2020-04-06 18:13:28 +0200
08202fee80 Add a GitHub action to run gosec Cosmin Cojocar 2020-04-06 18:08:01 +0200
9851f48bb1 Update README with some instruction how to run gosec as a GitHub action Cosmin Cojocar 2020-04-06 18:13:28 +0200
06673a512b Add a GitHub action to run gosec Cosmin Cojocar 2020-04-06 18:08:01 +0200
c6e10af40f Handle properly the gosec module version v2 Cosmin Cojocar 2020-04-01 22:18:39 +0200
3b7c5d128e Handle properly the gosec module version v2 Cosmin Cojocar 2020-04-01 22:18:39 +0200
e946c8c399 Update all dependencies Renovate Bot 2020-04-01 06:22:47 +0000
1098085523

Update all dependencies Renovate Bot 2020-04-01 06:22:47 +0000
e030aa4f76 Remove the go 1.14 version from github action Cosmin Cojocar 2020-03-30 13:20:59 +0200
ee176ff8fc Fix the job names in the Github workflow Cosmin Cojocar 2020-03-30 13:16:53 +0200
cabccc75ef Add to GitHub workflow some jobs for go1.13 and go1.12 Cosmin Cojocar 2020-03-30 13:15:21 +0200
a111777041 Change the GitHub workflow to use only the latest Go version Cosmin Cojocar 2020-03-30 13:06:29 +0200
722acb64cb Change the GitHub workflow to run the builds only on ubuntu-latest platform Cosmin Cojocar 2020-03-30 12:59:02 +0200
5284f34b6f Change the GitHub workflow to use an action which install Go using a Go version from the matrix Cosmin Cojocar 2020-03-30 12:52:42 +0200
8de5fb6eb2 Migrate the build to GitHub Actions Cosmin Cojocar 2020-03-26 22:43:52 +0100
09a39f1918 Migrate the build to GitHub Actions Cosmin Cojocar 2020-03-26 22:43:52 +0100
7da9f46445 Fix the call list info to handle selector expressions Cosmin Cojocar 2020-03-15 15:42:26 +0100
144ed5297d Fix the call list info to handle selector expressions Cosmin Cojocar 2020-03-15 15:42:26 +0100
cf2590442c Fix the subproc rule to handle correctly the CommandContext check Cosmin Cojocar 2020-03-11 15:18:38 +0100
f97f86103c Update the subproc rule to detect the syscall.ForkExec and syscall.StartProces calls Cosmin Cojocar 2020-03-11 14:00:30 +0100
b8c1acdd0f Fix the subproc rule to handle correctly the CommandContext check Cosmin Cojocar 2020-03-11 15:18:38 +0100
11f3259d6e Update the subproc rule to detect the syscall.ForkExec and syscall.StartProces calls Cosmin Cojocar 2020-03-11 14:00:30 +0100
c998389da2

re-generate install.sh with latest godownloader (#446) Tomas Kral 2020-03-02 14:48:48 +0100
385c827d36 re-generate install.sh with latest godownloader Tomas Kral 2020-03-02 14:36:35 +0100