gosec: add G602 analyzer (#4906)

.golangci.next.reference.yml

@@ -874,7 +874,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # To specify a set of rules to explicitly exclude.
     # Available rules: https://github.com/securego/gosec#available-rules
@@ -914,7 +913,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # Exclude generated files
     # Default: false

.golangci.reference.yml

@@ -874,7 +874,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # To specify a set of rules to explicitly exclude.
     # Available rules: https://github.com/securego/gosec#available-rules
@@ -914,7 +913,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # Exclude generated files
     # Default: false

jsonschema/golangci.jsonschema.json

@@ -157,8 +157,7 @@
         "G503",
         "G504",
         "G505",
-        "G601",
-        "G602"
+        "G601"
       ]
     },
     "govet-analyzers": {

jsonschema/golangci.next.jsonschema.json

@@ -157,8 +157,7 @@
         "G503",
         "G504",
         "G505",
-        "G601",
-        "G602"
+        "G601"
       ]
     },
     "govet-analyzers": {

pkg/golinters/gosec/gosec.go

@@ -77,6 +77,7 @@ func runGoSec(lintCtx *linter.Context, pass *analysis.Pass, settings *config.GoS
 	}
 
 	analyzer.CheckRules(pkg)
+	analyzer.CheckAnalyzers(pkg)
 
 	secIssues, _, _ := analyzer.Report()
 	if len(secIssues) == 0 {