mirror of
https://github.com/hanzo-fi/stack.git
synced 2026-10-30 20:34:43 +00:00
43 lines
1.8 KiB
YAML
43 lines
1.8 KiB
YAML
allow-parallel-runners: true
|
|
run:
|
|
timeout: 5m
|
|
linters:
|
|
disable-all: true
|
|
enable:
|
|
- gofmt
|
|
- goimports
|
|
- unused
|
|
- gosec
|
|
linters-settings:
|
|
gosec:
|
|
# To select a subset of rules to run.
|
|
# Available rules: https://github.com/securego/gosec#available-rules
|
|
includes:
|
|
- G103 # Audit the use of unsafe block
|
|
- G104 # Audit errors not checked
|
|
- G106 # Audit the use of ssh.InsecureIgnoreHostKey
|
|
- G108 # Profiling endpoint automatically exposed on /debug/pprof
|
|
- G109 # Potential Integer overflow made by strconv.Atoi result conversion to int16/32
|
|
- G110 # Potential DoS vulnerability via decompression bomb
|
|
- G111 # Potential directory traversal
|
|
- G112 # Potential slowloris attack
|
|
# - G113 # Usage of Rat.SetString in math/big with an overflow (CVE-2022-23772)
|
|
- G201 # SQL query construction using format string
|
|
- G202 # SQL query construction using string concatenation
|
|
- G203 # Use of unescaped data in HTML templates
|
|
- G204 # Audit use of command execution
|
|
- G301 # Poor file permissions used when creating a directory
|
|
- G302 # Poor file permissions used with chmod
|
|
- G303 # Creating tempfile using a predictable path
|
|
- G304 # File path provided as taint input
|
|
- G305 # File traversal when extracting zip/tar archive
|
|
- G306 # Poor file permissions used when writing to a new file
|
|
- G307 # Poor file permissions used when creating a file with os.Create
|
|
- G401 # Detect the usage of DES, RC4, MD5 or SHA1
|
|
- G403 # Ensure minimum RSA key length of 2048 bits
|
|
- G501 # Import blocklist: crypto/md5
|
|
- G502 # Import blocklist: crypto/des
|
|
- G503 # Import blocklist: crypto/rc4
|
|
- G504 # Import blocklist: net/http/cgi
|
|
- G505 # Import blocklist: crypto/sha1
|
|
- G602 # Slice access out of bounds |