diff --git a/go.mod b/go.mod index 84daa54f..6471c494 100644 --- a/go.mod +++ b/go.mod @@ -19,7 +19,6 @@ require ( github.com/golangci/goconst v0.0.0-20180610141641-041c5f2b40f3 github.com/golangci/gocyclo v0.0.0-20180528134321-2becd97e67ee github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98 - github.com/golangci/gosec v0.0.0-20190911143311-c62ea1e208f0 github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc github.com/golangci/lint-1 v0.0.0-20190420132249-ee948d087217 github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca @@ -32,6 +31,7 @@ require ( github.com/mitchellh/go-homedir v1.1.0 github.com/mitchellh/go-ps v0.0.0-20190716172923-621e5597135b github.com/pkg/errors v0.8.1 + github.com/securego/gosec v0.0.0-20190912120752-140048b2a218 github.com/shirou/gopsutil v2.18.12+incompatible github.com/shirou/w32 v0.0.0-20160930032740-bb4de0191aa4 // indirect github.com/sirupsen/logrus v1.4.2 diff --git a/go.sum b/go.sum index 92b2e6b5..78d7c318 100644 --- a/go.sum +++ b/go.sum @@ -92,8 +92,6 @@ github.com/golangci/gocyclo v0.0.0-20180528134321-2becd97e67ee h1:J2XAy40+7yz70u github.com/golangci/gocyclo v0.0.0-20180528134321-2becd97e67ee/go.mod h1:ozx7R9SIwqmqf5pRP90DhR2Oay2UIjGuKheCBCNwAYU= github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98 h1:0OkFarm1Zy2CjCiDKfK9XHgmc2wbDlRMD2hD8anAJHU= github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98/go.mod h1:9qCChq59u/eW8im404Q2WWTrnBUQKjpNYKMbU4M7EFU= -github.com/golangci/gosec v0.0.0-20190911143311-c62ea1e208f0 h1:Lg0s3m8xHd0d0zs37/varsHPIIGcVJvdRROQvR0zMoo= -github.com/golangci/gosec v0.0.0-20190911143311-c62ea1e208f0/go.mod h1:5Sci4RoFfekzQaPBeydUM2GPACw4ctji1bogLRW+fuc= github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc h1:gLLhTLMk2/SutryVJ6D4VZCU3CUqr8YloG7FPIBWFpI= github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc/go.mod h1:e5tpTHCfVze+7EpLEozzMB3eafxo2KT5veNg1k6byQU= github.com/golangci/lint-1 v0.0.0-20190420132249-ee948d087217 h1:En/tZdwhAn0JNwLuXzP3k2RVtMqMmOEK7Yu/g3tmtJE= @@ -191,6 +189,8 @@ github.com/quasilyte/go-consistent v0.0.0-20190521200055-c6f3937de18c/go.mod h1: github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod h1:XWv6SoW27p1b0cqNHllgS5HIMJraePCO15w5zCzIWYg= github.com/rogpeppe/go-internal v1.1.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= github.com/russross/blackfriday v1.5.2/go.mod h1:JO/DiYxRf+HjHt06OyowR9PTA263kcR/rfWxYHBV53g= +github.com/securego/gosec v0.0.0-20190912120752-140048b2a218 h1:O0yPHYL49quNL4Oj2wVq+zbGMu4dAM6iLoOQtm49TrQ= +github.com/securego/gosec v0.0.0-20190912120752-140048b2a218/go.mod h1:q6oYAujd2qyeU4cJqIri4LBIgdHXGvxWHZ1E29HNFRE= github.com/shirou/gopsutil v2.18.12+incompatible h1:1eaJvGomDnH74/5cF4CTmTbLHAriGFsTZppLXDX93OM= github.com/shirou/gopsutil v2.18.12+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/shirou/w32 v0.0.0-20160930032740-bb4de0191aa4 h1:udFKJ0aHUL60LboW/A+DfgoHVedieIzIXE8uylPue0U= @@ -279,12 +279,27 @@ golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5h golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.0.0-20190910064555-bbd175535a8b h1:3S2h5FadpNr0zUUCVZjlKIEYF+KaX/OBplTGo89CYHI= -golang.org/x/sys v0.0.0-20190910064555-bbd175535a8b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190911201528-7ad0cfa0b7b5 h1:SW/0nsKCUaozCUtZTakri5laocGx/5bkDSSLrFUsa5s= +golang.org/x/sys v0.0.0-20190911201528-7ad0cfa0b7b5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.2 h1:tW2bmiBqwgJj/UpqtC8EpXEZVYOwU0yG4iWbprSVAcs= golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/tools v0.0.0-20180221164845-07fd8470d635/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20181117154741-2ddaf7f79a09/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190110163146-51295c7ec13a/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190121143147-24cd39ecf745/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190311215038-5c2858a9cfe5/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190322203728-c1a832b0ad89/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190425150028-36563e24a262/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190521203540-521d6ed310dd/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190910044552-dd2b5c81c578/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20190911230505-6bfd74cf029c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20190912215617-3720d1ec3678 h1:rM1Udd0CgtYI3KUIhu9ROz0QCqjW+n/ODp/hH7c60Xc= +golang.org/x/tools v0.0.0-20190912215617-3720d1ec3678/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= diff --git a/pkg/golinters/gosec.go b/pkg/golinters/gosec.go index 351692ee..3187e6e2 100644 --- a/pkg/golinters/gosec.go +++ b/pkg/golinters/gosec.go @@ -8,8 +8,8 @@ import ( "log" "strconv" - "github.com/golangci/gosec" - "github.com/golangci/gosec/rules" + "github.com/securego/gosec" + "github.com/securego/gosec/rules" "github.com/golangci/golangci-lint/pkg/lint/linter" "github.com/golangci/golangci-lint/pkg/result" diff --git a/vendor/github.com/golangci/gosec/.gitignore b/vendor/github.com/securego/gosec/.gitignore similarity index 100% rename from vendor/github.com/golangci/gosec/.gitignore rename to vendor/github.com/securego/gosec/.gitignore diff --git a/vendor/github.com/golangci/gosec/.goreleaser.yml b/vendor/github.com/securego/gosec/.goreleaser.yml similarity index 100% rename from vendor/github.com/golangci/gosec/.goreleaser.yml rename to vendor/github.com/securego/gosec/.goreleaser.yml diff --git a/vendor/github.com/golangci/gosec/.travis.yml b/vendor/github.com/securego/gosec/.travis.yml similarity index 100% rename from vendor/github.com/golangci/gosec/.travis.yml rename to vendor/github.com/securego/gosec/.travis.yml diff --git a/vendor/github.com/golangci/gosec/Dockerfile b/vendor/github.com/securego/gosec/Dockerfile similarity index 100% rename from vendor/github.com/golangci/gosec/Dockerfile rename to vendor/github.com/securego/gosec/Dockerfile diff --git a/vendor/github.com/golangci/gosec/LICENSE.txt b/vendor/github.com/securego/gosec/LICENSE.txt similarity index 100% rename from vendor/github.com/golangci/gosec/LICENSE.txt rename to vendor/github.com/securego/gosec/LICENSE.txt diff --git a/vendor/github.com/golangci/gosec/Makefile b/vendor/github.com/securego/gosec/Makefile similarity index 100% rename from vendor/github.com/golangci/gosec/Makefile rename to vendor/github.com/securego/gosec/Makefile diff --git a/vendor/github.com/golangci/gosec/README.md b/vendor/github.com/securego/gosec/README.md similarity index 94% rename from vendor/github.com/golangci/gosec/README.md rename to vendor/github.com/securego/gosec/README.md index a8e8b52f..4d16c581 100644 --- a/vendor/github.com/golangci/gosec/README.md +++ b/vendor/github.com/securego/gosec/README.md @@ -15,10 +15,10 @@ You may obtain a copy of the License [here](http://www.apache.org/licenses/LICEN [![Build Status](https://travis-ci.org/securego/gosec.svg?branch=master)](https://travis-ci.org/securego/gosec) [![Coverage Status](https://codecov.io/gh/securego/gosec/branch/master/graph/badge.svg)](https://codecov.io/gh/securego/gosec) -[![GoReport](https://goreportcard.com/badge/github.com/golangci/gosec)](https://goreportcard.com/badge/github.com/golangci/gosec) -[![GoDoc](https://godoc.org/github.com/golangci/gosec?status.svg)](https://godoc.org/github.com/golangci/gosec) +[![GoReport](https://goreportcard.com/badge/github.com/securego/gosec)](https://goreportcard.com/badge/github.com/securego/gosec) +[![GoDoc](https://godoc.org/github.com/securego/gosec?status.svg)](https://godoc.org/github.com/securego/gosec) [![Docs](https://readthedocs.org/projects/docs/badge/?version=latest)](https://securego.io/) -[![Downloads](https://img.shields.io/github/downloads/securego/gosec/total.svg)](https://github.com/golangci/gosec/releases) +[![Downloads](https://img.shields.io/github/downloads/securego/gosec/total.svg)](https://github.com/securego/gosec/releases) [![Docker Pulls](https://img.shields.io/docker/pulls/securego/gosec.svg)](https://hub.docker.com/r/securego/gosec/tags) [![Slack](http://securego.herokuapp.com/badge.svg)](http://securego.herokuapp.com) @@ -38,7 +38,7 @@ wget -O - -q https://raw.githubusercontent.com/securego/gosec/master/install.sh # If you want to use the checksums provided on the "Releases" page # then you will have to download a tar.gz file for your operating system instead of a binary file -wget https://github.com/golangci/gosec/releases/download/vX.Y.Z/gosec_vX.Y.Z_OS.tar.gz +wget https://github.com/securego/gosec/releases/download/vX.Y.Z/gosec_vX.Y.Z_OS.tar.gz # The file will be in the current folder where you run the command # and you can check the checksum like this @@ -50,7 +50,7 @@ gosec --help ### Local Installation ```bash -go get github.com/golangci/gosec/cmd/gosec +go get github.com/securego/gosec/cmd/gosec ``` ## Usage @@ -273,7 +273,7 @@ The configuration of TLS rule can be generated from [Mozilla's TLS ciphers recom First you need to install the generator tool: ```bash -go get github.com/golangci/gosec/cmd/tlsconfig/... +go get github.com/securego/gosec/cmd/tlsconfig/... ``` You can invoke now the `go generate` in the root of the project: diff --git a/vendor/github.com/golangci/gosec/analyzer.go b/vendor/github.com/securego/gosec/analyzer.go similarity index 99% rename from vendor/github.com/golangci/gosec/analyzer.go rename to vendor/github.com/securego/gosec/analyzer.go index 913ee679..226380ab 100644 --- a/vendor/github.com/golangci/gosec/analyzer.go +++ b/vendor/github.com/securego/gosec/analyzer.go @@ -12,8 +12,6 @@ // See the License for the specific language governing permissions and // limitations under the License. -// Modifications copyright (C) 2018 GolangCI - // Package gosec holds the central scanning logic used by gosec security scanner package gosec @@ -182,6 +180,7 @@ func (gosec *Analyzer) load(pkgPath string, conf *packages.Config) ([]*packages. return pkgs, nil } +// Check runs analysis on the given package func (gosec *Analyzer) Check(pkg *packages.Package) { gosec.logger.Println("Checking package:", pkg.Name) for _, file := range pkg.Syntax { diff --git a/vendor/github.com/golangci/gosec/call_list.go b/vendor/github.com/securego/gosec/call_list.go similarity index 100% rename from vendor/github.com/golangci/gosec/call_list.go rename to vendor/github.com/securego/gosec/call_list.go diff --git a/vendor/github.com/golangci/gosec/config.go b/vendor/github.com/securego/gosec/config.go similarity index 100% rename from vendor/github.com/golangci/gosec/config.go rename to vendor/github.com/securego/gosec/config.go diff --git a/vendor/github.com/golangci/gosec/errors.go b/vendor/github.com/securego/gosec/errors.go similarity index 100% rename from vendor/github.com/golangci/gosec/errors.go rename to vendor/github.com/securego/gosec/errors.go diff --git a/vendor/github.com/golangci/gosec/go.mod b/vendor/github.com/securego/gosec/go.mod similarity index 82% rename from vendor/github.com/golangci/gosec/go.mod rename to vendor/github.com/securego/gosec/go.mod index 8ea2b36d..30122724 100644 --- a/vendor/github.com/golangci/gosec/go.mod +++ b/vendor/github.com/securego/gosec/go.mod @@ -1,4 +1,4 @@ -module github.com/golangci/gosec +module github.com/securego/gosec require ( github.com/golang/protobuf v1.3.2 // indirect @@ -13,9 +13,11 @@ require ( github.com/stretchr/testify v1.4.0 // indirect golang.org/x/crypto v0.0.0-20190911031432-227b76d455e7 // indirect golang.org/x/net v0.0.0-20190909003024-a7b16738d86b // indirect - golang.org/x/sys v0.0.0-20190910064555-bbd175535a8b // indirect + golang.org/x/sys v0.0.0-20190911201528-7ad0cfa0b7b5 // indirect golang.org/x/text v0.3.2 // indirect - golang.org/x/tools v0.0.0-20190911022129-16c5e0f7d110 + golang.org/x/tools v0.0.0-20190911230505-6bfd74cf029c gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect gopkg.in/yaml.v2 v2.2.2 ) + +go 1.13 diff --git a/vendor/github.com/golangci/gosec/go.sum b/vendor/github.com/securego/gosec/go.sum similarity index 96% rename from vendor/github.com/golangci/gosec/go.sum rename to vendor/github.com/securego/gosec/go.sum index e23739b0..9431b97d 100644 --- a/vendor/github.com/golangci/gosec/go.sum +++ b/vendor/github.com/securego/gosec/go.sum @@ -67,6 +67,7 @@ golang.org/x/sys v0.0.0-20190907184412-d223b2b6db03/go.mod h1:h1NjWce9XRLGQEsW7w golang.org/x/sys v0.0.0-20190909082730-f460065e899a h1:mIzbOulag9/gXacgxKlFVwpCOWSfBT3/pDyyCwGA9as= golang.org/x/sys v0.0.0-20190909082730-f460065e899a/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190910064555-bbd175535a8b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190911201528-7ad0cfa0b7b5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.2 h1:tW2bmiBqwgJj/UpqtC8EpXEZVYOwU0yG4iWbprSVAcs= @@ -82,6 +83,8 @@ golang.org/x/tools v0.0.0-20190910044552-dd2b5c81c578 h1:f0Gfd654rnnfXT1+BK1YHPT golang.org/x/tools v0.0.0-20190910044552-dd2b5c81c578/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.0.0-20190911022129-16c5e0f7d110 h1:6S6bidS7O4yAwA5ORRbRIjvNQ9tGbLd5e+LRIaTeVDQ= golang.org/x/tools v0.0.0-20190911022129-16c5e0f7d110/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20190911230505-6bfd74cf029c h1:ZgedNh8bIOBjyY5XEG0kR/41dSN9H+5jFZWuR/TgA1g= +golang.org/x/tools v0.0.0-20190911230505-6bfd74cf029c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY= diff --git a/vendor/github.com/golangci/gosec/helpers.go b/vendor/github.com/securego/gosec/helpers.go similarity index 100% rename from vendor/github.com/golangci/gosec/helpers.go rename to vendor/github.com/securego/gosec/helpers.go diff --git a/vendor/github.com/golangci/gosec/import_tracker.go b/vendor/github.com/securego/gosec/import_tracker.go similarity index 100% rename from vendor/github.com/golangci/gosec/import_tracker.go rename to vendor/github.com/securego/gosec/import_tracker.go diff --git a/vendor/github.com/golangci/gosec/install.sh b/vendor/github.com/securego/gosec/install.sh similarity index 99% rename from vendor/github.com/golangci/gosec/install.sh rename to vendor/github.com/securego/gosec/install.sh index 768c83f9..9ee8143e 100644 --- a/vendor/github.com/golangci/gosec/install.sh +++ b/vendor/github.com/securego/gosec/install.sh @@ -12,7 +12,7 @@ Usage: $this [-b] bindir [-d] [tag] -b sets bindir or installation directory, Defaults to ./bin -d turns on debug logging [tag] is a tag from - https://github.com/golangci/gosec/releases + https://github.com/securego/gosec/releases If tag is missing, then the latest will be used. Generated by godownloader diff --git a/vendor/github.com/golangci/gosec/issue.go b/vendor/github.com/securego/gosec/issue.go similarity index 100% rename from vendor/github.com/golangci/gosec/issue.go rename to vendor/github.com/securego/gosec/issue.go diff --git a/vendor/github.com/golangci/gosec/renovate.json b/vendor/github.com/securego/gosec/renovate.json similarity index 100% rename from vendor/github.com/golangci/gosec/renovate.json rename to vendor/github.com/securego/gosec/renovate.json diff --git a/vendor/github.com/golangci/gosec/resolve.go b/vendor/github.com/securego/gosec/resolve.go similarity index 100% rename from vendor/github.com/golangci/gosec/resolve.go rename to vendor/github.com/securego/gosec/resolve.go diff --git a/vendor/github.com/golangci/gosec/rule.go b/vendor/github.com/securego/gosec/rule.go similarity index 100% rename from vendor/github.com/golangci/gosec/rule.go rename to vendor/github.com/securego/gosec/rule.go diff --git a/vendor/github.com/golangci/gosec/rules/archive.go b/vendor/github.com/securego/gosec/rules/archive.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/archive.go rename to vendor/github.com/securego/gosec/rules/archive.go index a527bffd..55f390c5 100644 --- a/vendor/github.com/golangci/gosec/rules/archive.go +++ b/vendor/github.com/securego/gosec/rules/archive.go @@ -4,7 +4,7 @@ import ( "go/ast" "go/types" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type archive struct { diff --git a/vendor/github.com/golangci/gosec/rules/bind.go b/vendor/github.com/securego/gosec/rules/bind.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/bind.go rename to vendor/github.com/securego/gosec/rules/bind.go index 6a73d038..7273588c 100644 --- a/vendor/github.com/golangci/gosec/rules/bind.go +++ b/vendor/github.com/securego/gosec/rules/bind.go @@ -18,7 +18,7 @@ import ( "go/ast" "regexp" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) // Looks for net.Listen("0.0.0.0") or net.Listen(":8080") diff --git a/vendor/github.com/golangci/gosec/rules/blacklist.go b/vendor/github.com/securego/gosec/rules/blacklist.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/blacklist.go rename to vendor/github.com/securego/gosec/rules/blacklist.go index cf57f2c7..24fbf122 100644 --- a/vendor/github.com/golangci/gosec/rules/blacklist.go +++ b/vendor/github.com/securego/gosec/rules/blacklist.go @@ -18,7 +18,7 @@ import ( "go/ast" "strings" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type blacklistedImport struct { diff --git a/vendor/github.com/golangci/gosec/rules/errors.go b/vendor/github.com/securego/gosec/rules/errors.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/errors.go rename to vendor/github.com/securego/gosec/rules/errors.go index 62e0c992..d2e98b53 100644 --- a/vendor/github.com/golangci/gosec/rules/errors.go +++ b/vendor/github.com/securego/gosec/rules/errors.go @@ -18,7 +18,7 @@ import ( "go/ast" "go/types" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type noErrorCheck struct { diff --git a/vendor/github.com/golangci/gosec/rules/fileperms.go b/vendor/github.com/securego/gosec/rules/fileperms.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/fileperms.go rename to vendor/github.com/securego/gosec/rules/fileperms.go index 0a5a662f..2a56f35b 100644 --- a/vendor/github.com/golangci/gosec/rules/fileperms.go +++ b/vendor/github.com/securego/gosec/rules/fileperms.go @@ -19,7 +19,7 @@ import ( "go/ast" "strconv" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type filePermissions struct { diff --git a/vendor/github.com/golangci/gosec/rules/hardcoded_credentials.go b/vendor/github.com/securego/gosec/rules/hardcoded_credentials.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/hardcoded_credentials.go rename to vendor/github.com/securego/gosec/rules/hardcoded_credentials.go index 2e0dd9a9..17a5cdfe 100644 --- a/vendor/github.com/golangci/gosec/rules/hardcoded_credentials.go +++ b/vendor/github.com/securego/gosec/rules/hardcoded_credentials.go @@ -20,7 +20,7 @@ import ( "strconv" zxcvbn "github.com/nbutton23/zxcvbn-go" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type credentials struct { diff --git a/vendor/github.com/golangci/gosec/rules/rand.go b/vendor/github.com/securego/gosec/rules/rand.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/rand.go rename to vendor/github.com/securego/gosec/rules/rand.go index c1254d37..a2bdabe1 100644 --- a/vendor/github.com/golangci/gosec/rules/rand.go +++ b/vendor/github.com/securego/gosec/rules/rand.go @@ -17,7 +17,7 @@ package rules import ( "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type weakRand struct { diff --git a/vendor/github.com/golangci/gosec/rules/readfile.go b/vendor/github.com/securego/gosec/rules/readfile.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/readfile.go rename to vendor/github.com/securego/gosec/rules/readfile.go index a59e8056..87158f03 100644 --- a/vendor/github.com/golangci/gosec/rules/readfile.go +++ b/vendor/github.com/securego/gosec/rules/readfile.go @@ -18,7 +18,7 @@ import ( "go/ast" "go/types" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type readfile struct { diff --git a/vendor/github.com/golangci/gosec/rules/rsa.go b/vendor/github.com/securego/gosec/rules/rsa.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/rsa.go rename to vendor/github.com/securego/gosec/rules/rsa.go index fbe788c0..8f17afee 100644 --- a/vendor/github.com/golangci/gosec/rules/rsa.go +++ b/vendor/github.com/securego/gosec/rules/rsa.go @@ -18,7 +18,7 @@ import ( "fmt" "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type weakKeyStrength struct { diff --git a/vendor/github.com/golangci/gosec/rules/rulelist.go b/vendor/github.com/securego/gosec/rules/rulelist.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/rulelist.go rename to vendor/github.com/securego/gosec/rules/rulelist.go index 0d026dda..b8a28a88 100644 --- a/vendor/github.com/golangci/gosec/rules/rulelist.go +++ b/vendor/github.com/securego/gosec/rules/rulelist.go @@ -14,7 +14,7 @@ package rules -import "github.com/golangci/gosec" +import "github.com/securego/gosec" // RuleDefinition contains the description of a rule and a mechanism to // create it. diff --git a/vendor/github.com/golangci/gosec/rules/sql.go b/vendor/github.com/securego/gosec/rules/sql.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/sql.go rename to vendor/github.com/securego/gosec/rules/sql.go index 7b00e461..ccee0a6b 100644 --- a/vendor/github.com/golangci/gosec/rules/sql.go +++ b/vendor/github.com/securego/gosec/rules/sql.go @@ -18,7 +18,7 @@ import ( "go/ast" "regexp" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type sqlStatement struct { diff --git a/vendor/github.com/golangci/gosec/rules/ssh.go b/vendor/github.com/securego/gosec/rules/ssh.go similarity index 96% rename from vendor/github.com/golangci/gosec/rules/ssh.go rename to vendor/github.com/securego/gosec/rules/ssh.go index dfab3dd3..7496b5f8 100644 --- a/vendor/github.com/golangci/gosec/rules/ssh.go +++ b/vendor/github.com/securego/gosec/rules/ssh.go @@ -3,7 +3,7 @@ package rules import ( "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type sshHostKey struct { diff --git a/vendor/github.com/golangci/gosec/rules/ssrf.go b/vendor/github.com/securego/gosec/rules/ssrf.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/ssrf.go rename to vendor/github.com/securego/gosec/rules/ssrf.go index ed94353e..34aa5d42 100644 --- a/vendor/github.com/golangci/gosec/rules/ssrf.go +++ b/vendor/github.com/securego/gosec/rules/ssrf.go @@ -4,7 +4,7 @@ import ( "go/ast" "go/types" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type ssrf struct { diff --git a/vendor/github.com/golangci/gosec/rules/subproc.go b/vendor/github.com/securego/gosec/rules/subproc.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/subproc.go rename to vendor/github.com/securego/gosec/rules/subproc.go index 60e0db83..809d8088 100644 --- a/vendor/github.com/golangci/gosec/rules/subproc.go +++ b/vendor/github.com/securego/gosec/rules/subproc.go @@ -18,7 +18,7 @@ import ( "go/ast" "go/types" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type subprocess struct { diff --git a/vendor/github.com/golangci/gosec/rules/tempfiles.go b/vendor/github.com/securego/gosec/rules/tempfiles.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/tempfiles.go rename to vendor/github.com/securego/gosec/rules/tempfiles.go index 843a5cad..095544d3 100644 --- a/vendor/github.com/golangci/gosec/rules/tempfiles.go +++ b/vendor/github.com/securego/gosec/rules/tempfiles.go @@ -18,7 +18,7 @@ import ( "go/ast" "regexp" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type badTempFile struct { diff --git a/vendor/github.com/golangci/gosec/rules/templates.go b/vendor/github.com/securego/gosec/rules/templates.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/templates.go rename to vendor/github.com/securego/gosec/rules/templates.go index 1cea8d52..0bff6875 100644 --- a/vendor/github.com/golangci/gosec/rules/templates.go +++ b/vendor/github.com/securego/gosec/rules/templates.go @@ -17,7 +17,7 @@ package rules import ( "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type templateCheck struct { diff --git a/vendor/github.com/golangci/gosec/rules/tls.go b/vendor/github.com/securego/gosec/rules/tls.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/tls.go rename to vendor/github.com/securego/gosec/rules/tls.go index b518581d..d4b7fa2b 100644 --- a/vendor/github.com/golangci/gosec/rules/tls.go +++ b/vendor/github.com/securego/gosec/rules/tls.go @@ -20,7 +20,7 @@ import ( "fmt" "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type insecureConfigTLS struct { diff --git a/vendor/github.com/golangci/gosec/rules/tls_config.go b/vendor/github.com/securego/gosec/rules/tls_config.go similarity index 99% rename from vendor/github.com/golangci/gosec/rules/tls_config.go rename to vendor/github.com/securego/gosec/rules/tls_config.go index b3956e90..42ec85db 100644 --- a/vendor/github.com/golangci/gosec/rules/tls_config.go +++ b/vendor/github.com/securego/gosec/rules/tls_config.go @@ -3,7 +3,7 @@ package rules import ( "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) // NewModernTLSCheck creates a check for Modern TLS ciphers diff --git a/vendor/github.com/golangci/gosec/rules/unsafe.go b/vendor/github.com/securego/gosec/rules/unsafe.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/unsafe.go rename to vendor/github.com/securego/gosec/rules/unsafe.go index 1498ee45..f4a38be3 100644 --- a/vendor/github.com/golangci/gosec/rules/unsafe.go +++ b/vendor/github.com/securego/gosec/rules/unsafe.go @@ -17,7 +17,7 @@ package rules import ( "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type usingUnsafe struct { diff --git a/vendor/github.com/golangci/gosec/rules/weakcrypto.go b/vendor/github.com/securego/gosec/rules/weakcrypto.go similarity index 98% rename from vendor/github.com/golangci/gosec/rules/weakcrypto.go rename to vendor/github.com/securego/gosec/rules/weakcrypto.go index fa2273f4..60c63aa8 100644 --- a/vendor/github.com/golangci/gosec/rules/weakcrypto.go +++ b/vendor/github.com/securego/gosec/rules/weakcrypto.go @@ -17,7 +17,7 @@ package rules import ( "go/ast" - "github.com/golangci/gosec" + "github.com/securego/gosec" ) type usesWeakCryptography struct { diff --git a/vendor/modules.txt b/vendor/modules.txt index ad95376b..c355340e 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -89,9 +89,6 @@ github.com/golangci/gocyclo/pkg/gocyclo # github.com/golangci/gofmt v0.0.0-20181222123516-0b8337e80d98 github.com/golangci/gofmt/gofmt github.com/golangci/gofmt/goimports -# github.com/golangci/gosec v0.0.0-20190911143311-c62ea1e208f0 -github.com/golangci/gosec -github.com/golangci/gosec/rules # github.com/golangci/ineffassign v0.0.0-20190609212857-42439a7714cc github.com/golangci/ineffassign # github.com/golangci/lint-1 v0.0.0-20190420132249-ee948d087217 @@ -156,6 +153,9 @@ github.com/pelletier/go-toml github.com/pkg/errors # github.com/pmezard/go-difflib v1.0.0 github.com/pmezard/go-difflib/difflib +# github.com/securego/gosec v0.0.0-20190912120752-140048b2a218 +github.com/securego/gosec +github.com/securego/gosec/rules # github.com/shirou/gopsutil v2.18.12+incompatible github.com/shirou/gopsutil/cpu github.com/shirou/gopsutil/host @@ -195,7 +195,7 @@ github.com/ultraware/whitespace github.com/valyala/bytebufferpool # github.com/valyala/quicktemplate v1.1.1 github.com/valyala/quicktemplate -# golang.org/x/sys v0.0.0-20190910064555-bbd175535a8b +# golang.org/x/sys v0.0.0-20190911201528-7ad0cfa0b7b5 golang.org/x/sys/unix golang.org/x/sys/windows # golang.org/x/text v0.3.2