gosec

actions/gosec

Fork 0

mirror of https://github.com/securego/gosec.git synced 2024-12-25 12:05:52 +00:00

Commit graph

Select branches

Hide pull requests

ai-api-key-env

master

#10

#1000

#1002

#1003

#1006

#1008

#1009

#101

#1011

#1012

#1015

#1016

#1017

#102

#1020

#1021

#1022

#1023

#1026

#1027

#1028

#1029

#1033

#1034

#1035

#1037

#1038

#1039

#104

#1042

#1043

#1045

#1047

#1050

#1051

#1053

#1055

#1056

#1057

#1058

#1059

#1062

#1063

#1064

#1065

#1068

#1069

#1070

#1072

#1075

#1076

#1078

#1079

#1080

#1084

#1085

#1086

#1087

#1088

#1089

#109

#1091

#1095

#1096

#1097

#1098

#11

#110

#1100

#1101

#1102

#1103

#1104

#1107

#1108

#1111

#1112

#1113

#1114

#1117

#1118

#1119

#112

#1120

#1123

#1124

#1125

#1128

#1131

#1132

#1135

#1136

#1137

#1138

#1139

#114

#1142

#1144

#1145

#1147

#1148

#1149

#115

#1151

#1152

#1153

#1154

#1155

#1159

#1161

#1163

#1164

#1165

#1167

#1168

#1169

#1170

#1171

#1172

#1176

#1177

#1178

#1179

#118

#1180

#1181

#1182

#1183

#1186

#1188

#1189

#1190

#1191

#1192

#1193

#1194

#1197

#1201

#1203

#1207

#1208

#121

#1210

#1213

#1215

#1216

#1217

#1218

#122

#1221

#1223

#1225

#1226

#1227

#1228

#123

#123

#1231

#1232

#1233

#1235

#1236

#1238

#1239

#1242

#1245

#1246

#1248

#1249

#125

#1251

#1252

#1253

#1254

#1255

#1256

#1257

#1258

#1259

#1261

#1262

#1263

#1264

#1265

#1266

#1267

#1268

#1269

#1270

#1271

#1272

#1273

#1274

#1275

#1276

#1277

#1279

#128

#129

#133

#135

#136

#137

#137

#138

#139

#139

#14

#142

#146

#147

#147

#149

#150

#151

#151

#152

#154

#156

#160

#161

#162

#163

#164

#165

#166

#167

#168

#170

#175

#176

#176

#177

#178

#179

#18

#180

#180

#181

#182

#182

#183

#185

#186

#187

#188

#189

#189

#19

#191

#195

#198

#199

#20

#200

#201

#206

#206

#207

#207

#208

#21

#211

#214

#215

#216

#217

#219

#22

#220

#221

#222

#223

#225

#227

#228

#23

#231

#232

#233

#235

#236

#238

#239

#24

#240

#245

#246

#247

#248

#249

#251

#254

#256

#26

#261

#262

#263

#266

#27

#273

#274

#275

#276

#277

#279

#281

#282

#284

#285

#286

#288

#29

#290

#297

#30

#30

#300

#301

#302

#306

#307

#308

#309

#31

#310

#311

#312

#313

#316

#317

#318

#32

#320

#322

#326

#328

#33

#330

#332

#334

#339

#34

#346

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#395

#398

#399

#4

#40

#400

#402

#403

#405

#407

#409

#41

#410

#412

#417

#42

#421

#422

#426

#427

#428

#429

#431

#432

#433

#434

#435

#437

#441

#442

#443

#444

#445

#446

#449

#450

#452

#454

#455

#457

#459

#46

#460

#462

#463

#464

#466

#467

#47

#471

#472

#473

#474

#476

#477

#478

#479

#48

#480

#481

#483

#484

#485

#487

#489

#49

#491

#493

#495

#497

#498

#499

#5

#500

#503

#508

#509

#510

#513

#514

#516

#519

#52

#520

#521

#522

#524

#527

#529

#530

#531

#532

#533

#536

#538

#539

#544

#545

#546

#547

#553

#554

#555

#557

#558

#559

#56

#561

#562

#565

#566

#570

#572

#573

#575

#577

#58

#581

#583

#584

#585

#586

#590

#592

#593

#594

#595

#599

#6

#60

#601

#602

#604

#605

#606

#607

#608

#609

#610

#611

#613

#614

#615

#616

#618

#619

#62

#620

#621

#623

#624

#625

#626

#628

#629

#63

#631

#632

#633

#634

#635

#636

#637

#638

#640

#641

#642

#643

#645

#646

#647

#648

#65

#650

#651

#652

#653

#654

#655

#656

#658

#66

#660

#661

#663

#665

#666

#667

#668

#669

#67

#670

#672

#673

#674

#676

#677

#678

#679

#68

#680

#681

#683

#685

#686

#687

#688

#689

#69

#690

#692

#694

#695

#698

#699

#70

#701

#702

#703

#706

#707

#708

#71

#710

#712

#715

#716

#717

#718

#719

#72

#722

#724

#725

#728

#73

#731

#733

#734

#735

#737

#738

#739

#740

#741

#744

#745

#747

#748

#75

#751

#752

#753

#754

#755

#757

#758

#759

#76

#761

#763

#764

#765

#769

#770

#771

#772

#774

#775

#777

#778

#779

#781

#784

#786

#788

#789

#790

#791

#793

#795

#796

#798

#799

#800

#802

#803

#805

#806

#808

#809

#81

#810

#811

#812

#814

#816

#817

#818

#819

#82

#822

#824

#825

#826

#828

#829

#83

#830

#834

#835

#836

#837

#838

#839

#840

#841

#842

#844

#845

#846

#849

#854

#855

#857

#859

#86

#860

#863

#864

#865

#866

#867

#868

#869

#871

#872

#873

#874

#875

#876

#88

#880

#881

#882

#883

#884

#886

#887

#888

#889

#89

#89

#892

#894

#895

#896

#897

#898

#90

#902

#903

#904

#905

#906

#907

#909

#91

#910

#911

#912

#913

#914

#916

#917

#918

#92

#920

#921

#922

#923

#924

#927

#929

#93

#931

#932

#934

#935

#936

#938

#940

#942

#943

#944

#945

#946

#947

#948

#950

#951

#952

#953

#955

#956

#957

#958

#959

#960

#962

#963

#964

#967

#968

#969

#97

#970

#971

#973

#974

#975

#976

#977

#98

#981

#982

#983

#984

#986

#987

#989

#99

#991

#992

#993

#997

#998

1.0.0

1.1.0

1.2.0

1.3.0

2.0.0

v2.1.0

v2.10.0

v2.11.0

v2.12.0

v2.13.0

v2.13.1

v2.14.0

v2.15.0

v2.16.0

v2.17.0

v2.18.0

v2.18.1

v2.18.2

v2.19.0

v2.2.0

v2.20.0

v2.21.0

v2.21.1

v2.21.2

v2.21.3

v2.21.4

v2.3.0

v2.4.0

v2.5.0

v2.6.0

v2.6.1

v2.7.0

v2.8.0

v2.8.1

v2.9.0

v2.9.1

v2.9.2

v2.9.3

v2.9.4

v2.9.5

v2.9.6

77304046be Change a little the format Martin Vrachev 2019-02-25 17:02:59 +0200
9b01bbe517 Add comment for the map Martin Vrachev 2019-02-25 15:11:16 +0200
d92962cca3 Report for Golang errors Martin Vrachev 2019-02-25 14:13:56 +0200
9cdfec40ca Change test Martin Vrachev 2019-02-13 10:52:12 +0200
8048b15efa Add more badges in the README file Cosmin Cojocar 2019-02-13 11:27:11 +0100
33b128c4dd Add more badges in the README file Cosmin Cojocar 2019-02-13 11:27:11 +0100
ed6c581c35 Change test Martin Vrachev 2019-02-13 10:52:12 +0200
e2752bc191 revert to default GOPATH if necessary (#279) Joaquin L. Pereyra 2019-02-06 20:34:52 -0300
160cbe0715 fix fmt joaquinlpereyra-ml 2019-02-06 12:01:11 -0300
0e29bd718b revert to default GOPATH if necessary joaquinlpereyra-ml 2019-02-05 14:04:09 -0300
04ce7baf6c add a no-fail flag JulesDT 2019-01-25 12:04:43 -0500
5da2ea6d1d add a no-fail flag JulesDT 2019-01-25 12:04:43 -0500
a966ff760c Fix -conf example in README.md Joaquin L. Pereyra 2019-01-22 11:25:14 -0300
da73684986

Fix -conf example in README.md Joaquin L. Pereyra 2019-01-22 11:25:14 -0300
b6626154df Fix typo Cosmin Cojocar 2019-01-14 12:45:02 +0100
5d33e6ebe1 Update the README with some details about the configuration file Cosmin Cojocar 2019-01-14 12:43:12 +0100
c615ba9622 Fix typo Cosmin Cojocar 2019-01-14 12:45:02 +0100
a372c31c36 Update the README with some details about the configuration file Cosmin Cojocar 2019-01-14 12:43:12 +0100
f87af5fa72 Detect the unhandled errors even though they are explicitly ignored if the 'audit: enabled' setting is defined in the global configuration (#274) Cosmin Cojocar 2019-01-14 12:37:40 +0100
6a578a7f96 Detect in audit mode the unhandled errors even thought they are explicitly ignored Cosmin Cojocar 2019-01-14 12:19:12 +0100
ec4692360b Define more explicit the global options in the configuration Cosmin Cojocar 2019-01-14 11:47:15 +0100
14ed63d558 Do not flag the unhandled errors which are explicitly ignored Cosmin Cojocar 2019-01-14 09:50:19 +0100
a0d0e17240 Do not flag the unhandled errors which are explicitly ignored Cosmin Cojocar 2019-01-14 09:50:19 +0100
12400f9a1c Update README with the code coverage batch Cosmin Cojocar 2018-12-11 18:15:58 +0100
72e95e88ac Geneate and upload the test coverage report to codecove.io Cosmin Cojocar 2018-12-11 17:08:31 +0100
24e3094d2a Extend the bind rule to handle the case when the net.Listen address in provided from a const Cosmin Cojocar 2018-12-02 16:28:51 +0100
9b32fcac16 Fix the bind rule to handle the case when the arguments of the net.Listen are returned by a function call Cosmin Cojocar 2018-12-02 15:37:42 +0100
f14f17fb1d Add a helper function which extracts the string parameters values of a call expression Cosmin Cojocar 2018-12-02 15:36:02 +0100
b55084df1f Extend the bind rule to handle the case when the net.Listen address in provided from a const Cosmin Cojocar 2018-12-02 16:28:51 +0100
4f346fdf93 Fix the bind rule to handle the case when the arguments of the net.Listen are returned by a function call Cosmin Cojocar 2018-12-02 15:37:42 +0100
2205192057 Add a helper function which extracts the string parameters values of a call expression Cosmin Cojocar 2018-12-02 15:36:02 +0100
2695567487 Build the code sample for string builder only fron Go 1.10 onwards 1.2.0 Cosmin Cojocar 2018-11-11 09:41:40 +0100
ae82798b9c Fix the WriteSring test by handling the error Cosmin Cojocar 2018-11-10 16:39:44 +0100
adb42220da whitelist strings.Builder method in rule G104 Edoardo Tenani 2018-10-18 01:14:25 +0200
9b966a447e add test case for strings.Builder G104 whitelist inclusion Edoardo Tenani 2018-10-18 01:13:56 +0200
e99dc5eb8d Build the code sample for string builder only fron Go 1.10 onwards Cosmin Cojocar 2018-11-11 09:41:40 +0100
a5da2c79d1 Fix the WriteSring test by handling the error Cosmin Cojocar 2018-11-10 16:39:44 +0100
d82b356399 whitelist strings.Builder method in rule G104 Edoardo Tenani 2018-10-18 01:14:25 +0200
8de2bd8815 add test case for strings.Builder G104 whitelist inclusion Edoardo Tenani 2018-10-18 01:13:56 +0200
41809946d4 Make G201 ignore CallExpr with no args (#262) Yuki Ito 2018-11-05 17:28:47 +0900
443f84fd4d Fix golint link (#263) Yuki Ito 2018-11-05 17:13:26 +0900
4d607498c0 Fix golint link Yuki Ito 2018-11-05 02:12:39 +0900
901e7e31db Make G201 ignore CallExpr with no args Yuki Ito 2018-11-05 01:34:46 +0900
3116b07de4 Fix typos in comments and rulelist (#256) Oleksandr Redko 2018-10-11 15:45:31 +0300
9093cc4a77 Fix typos in comments and rulelist Oleksandr Redko 2018-10-11 15:28:39 +0300
e0a150bfa3

Merge pull request #254 from kishaningithub/253 Cosmin Cojocar 2018-10-05 13:12:28 +0200
97bc137c5b Add CI Installation steps and correct markdown lint errors Kishan B 2018-10-05 15:27:14 +0530
8c09a83248 Add install.sh script Kishan B 2018-10-05 15:26:13 +0530
d032909e3f

Merge pull request #251 from NeverOddOrEven/fix-html-template Cosmin Cojocar 2018-10-04 09:39:56 +0200
027dc2b8a7 This fixes the html template when using '-fmt=html' - resolves HTML escaping issues within the template - resolves reference issues to reportInfo struct i.e. issues -> Issues, metrics -> Stats NeverOddOrEven 2018-10-03 13:17:25 -0500
f9b41874b1

Merge pull request #249 from andrewhsu/go Cosmin Cojocar 2018-10-03 08:35:47 +0200
1ecd47e007 bump Dockerfile golang from 1.10 to 1.11 Andrew Hsu 2018-10-03 00:28:39 +0000
2cc6838ca3

Merge pull request #248 from ccojocar/code-samples-multiple-files Cosmin Cojocar 2018-09-28 11:52:04 +0300
64d58c2e51 Refactor the test code sample to support multiple files per sample Cosmin Cojocar 2018-09-28 11:42:25 +0300
d3f1980e7a Fix false positives for SQL string concatenation with constants from another file (#247) Delon Wong Her Laang 2018-09-28 15:46:59 +0800
bd870b91b5 Resolve merge conflict changes. Delon Wong Her Laang 2018-09-28 12:32:45 +0800
6970dac5ec

Merge branch 'master' into sql-string-concatenation Delon Wong Her Laang 2018-09-28 11:23:45 +0800
04e1c2af68 Allow for supporting code for test cases. Delon Wong Her Laang 2018-09-28 11:15:25 +0800
13e2cbfd87 Changed checking to not var or func. Delon Wong Her Laang 2018-09-26 21:36:00 +0800
8dc54e5772 Refactor code and added comments. Delon Wong Her Laang 2018-09-26 21:10:11 +0800
3cd750d1ec Go through all files in package to resolve that identifier Delon Wong Her Laang 2018-09-26 18:01:14 +0800
5f98926a7b Refactor Dockerfile (#245) Andrew Hsu 2018-09-25 22:09:20 -0700
b24e3ef56b fix the image execution example in README.md Andrew Hsu 2018-09-25 04:03:40 +0000
74bad7b572 Fix typo in comment. Delon Wong Her Laang 2018-09-25 19:51:28 +0800
35bbb9702e Allow for SQL concatenation of nodes that resolve to literals Delon Wong Her Laang 2018-09-25 19:51:18 +0800
7f6509a916

Update README.md (#246) Grant Murphy 2018-09-25 19:44:53 +1000
850e5f047a

Update README.md Grant Murphy 2018-09-25 19:31:30 +1000
762ff3a709 Allow quoted strings to be used to format SQL queries (#240) Dale Hui 2018-09-25 00:40:05 -0700
f859701019 refactor Dockerfile into multi-stage Andrew Hsu 2018-09-25 03:54:39 +0000
2c7e0a4e01 replace docker-entrypoint.sh with the gosec binary Andrew Hsu 2018-09-25 02:40:07 +0000
d12f53c443 bump Dockerfile golang to 1.10.4 Andrew Hsu 2018-09-25 01:45:28 +0000
a81f33848d no need for GOROOT in Dockerfile Andrew Hsu 2018-09-25 01:43:51 +0000
291a6e7adf no need for GOPATH in the Dockerfile Andrew Hsu 2018-09-25 01:41:02 +0000
e1c54951ff git ignore gosec binary Andrew Hsu 2018-09-25 02:43:31 +0000
b193fc69ec ignore the temporary image file used for builds Andrew Hsu 2018-09-25 01:40:22 +0000
aae944e2d1 Install the pq package for tests to pass Dale Hui 2018-09-10 02:27:18 -0700
09dec36b57 Add test for allowing quoted strings with string formatters Dale Hui 2018-09-10 02:09:25 -0700
ec32ce68d8 Support Go 1.11 (#239) Dale Hui 2018-09-10 00:09:12 -0700
049746dff3 Quoted strings are safe to use with SQL str formatted strings Dale Hui 2018-09-09 18:31:25 -0700
7771419f85 Factor out matching of formatter string Dale Hui 2018-09-09 18:29:53 -0700
8e8e1531e1 Support stripping vendor paths when matching calls Dale Hui 2018-09-09 18:25:52 -0700
d939773903 Support Go 1.11 and modules Dale Hui 2018-09-09 16:40:23 -0700
ca66c17c41 Test with the latest minor version of each major Go version Dale Hui 2018-09-09 18:35:51 -0700
145f1a0bf4 Removed wrapping feature (#238) cschoenduve-splunk 2018-09-04 09:08:37 -0700
821f7437bc Removed wrapping feature Conner Schoenduve 2018-09-04 08:44:37 -0700
419c9292c8 G107 - SSRF (#236) cschoenduve-splunk 2018-09-03 23:55:03 -0700
1d0e061523 Removed resty test Conner Schoenduve 2018-09-03 14:59:43 -0700
63b25c147f Fix typo in README (#235) Dom Udall 改善 2018-09-03 08:39:31 +0100
1c74651f17 Fixed Spacingv2 Conner Schoenduve 2018-08-31 16:50:10 -0700
be77c083ce Fixed spacing issues Conner Schoenduve 2018-08-31 16:42:31 -0700
462e36ec6f Added source code tests Conner Schoenduve 2018-08-31 16:26:12 -0700
43b5445e37 Added Selector evaluation Conner Schoenduve 2018-08-31 10:39:54 -0700
40bbcbe519

Fix typo in README Dom Udall 改善 2018-08-30 12:53:42 +0100
8bad224bfe Initial SSRF Rule Conner Schoenduve 2018-08-29 17:08:52 -0700
9d1a988a23

Merge 3f4f11a2f9 into 7fd94463ed coredefend 2018-08-29 16:07:54 +0000
7fd94463ed update to G304 which adds binary expressions and file joining (#233) cschoenduve-splunk 2018-08-27 21:34:07 -0700
72bbadb305 fixed a spacing change Conner Schoenduve 2018-08-27 11:02:53 -0700
226a2e2504 Added test code Conner Schoenduve 2018-08-27 10:30:55 -0700
7da5875ebc fixed comments Conner Schoenduve 2018-08-25 15:44:44 -0700
3065ca3ded removed debugging lines Conner Schoenduve 2018-08-25 15:42:58 -0700