securego/gosec
View on GitHub ↗ ★ 9,001 Go
Go security checker
8 mentions on Hacker News by 8 people: 2 stories, 6 comments · first 2018-08-02 · latest 2024-05-07
20082026
-
For those unaware, gosec (and by extension golangci-lint) will warn about uses of `math/rand` https://github.com/securego/gosec/blob/d3b2359ae29fe344f4df5...
comment by alecthomas · 2024-05-07 · in Secure Randomness in Go 1.22 -
What's the difference between this a https://github.com/securego/gosec ?
comment by elgolem89 · 2022-09-07 · in Vulnerability Management for Go -
…making sure that doesn't leak. I've made terrible mistakes leading /proc accidentally in my Web app https://github.com/securego/gosec/issues/569
comment by hendry · 2021-06-14 · in How to handle secrets on the command line -
…aliasing in for loop. (Confidence: MEDIUM, Severity: MEDIUM) 25: wg.Done() > 26: }(&item) 27: } [1] https://github.com/securego/gosec
comment by zimpenfish · 2021-03-30 · in Down the Golang Nil Rabbit Hole -
…# TODO(henvic) fix/update gosec when available: # G104: Doesn't understand _ assignments #270 # https://github.com/securego/gosec/issues/270 # Ignoring G104: Audit errors not checked for now. gosec -quiet -exclude G104 --quiet ./...
comment by henvic · 2019-11-11 · in Improving Go code: An introduction to the static analysis tool Staticcheck -
…when user input is used to access files - specifically because ‚..‘ allows one to „escape“. Gosec: https://github.com/securego/gosec
comment by starclaps · 2018-11-28 · in Dot Dot Considered Harmful