23 Commits

Author SHA1 Message Date
Ludovic Fernandez
1cabafc3b6
feat: use gosec severities (#4470) 2024-03-09 14:05:16 +01:00
dependabot[bot]
8bbb6555e3
build(deps): bump github.com/securego/gosec/v2 from 2.15.0 to 2.16.0 (#3843)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2023-05-21 16:01:13 +02:00
hbc
52edd01248
gosec: convert global settings as map with proper key type (#3779)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2023-04-21 22:20:59 +02:00
Oleksandr Redko
1e700732e7
dev: gofmt -w -r 'interface{} -> any' pkg scripts (#3742) 2023-03-28 16:22:55 +02:00
Oleksandr Redko
b673c5c1af
dev: replace pkg/errors with native error wrapping (#3604)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2023-02-22 01:35:43 +01:00
Marat Reymers
c531fc2ad5
gosec: allow global config (#2880) 2022-06-06 13:21:04 +02:00
Ludovic Fernandez
f9d815115c
bump golang.org/x/tools to HEAD (#2875)
* bump golang.org/x/tools to HEAD
* fix: adapt linters to the new validation system.
2022-05-23 12:39:57 +02:00
dependabot[bot]
6fc688ae05
build(deps): bump github.com/securego/gosec/v2 from 2.9.6 to 2.10.0 (#2624)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2022-02-27 14:03:53 +01:00
dependabot[bot]
56f27d0ad2
build(deps): bump github.com/securego/gosec/v2 from 2.9.3 to 2.9.5 (#2413)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2021-12-14 05:18:18 +01:00
Benjamin
e5cd59a607
dev: replace ioutil with io and os (#2318) 2021-11-01 20:21:26 +01:00
Ryan Leung
cc262bbac9
gosec: filter issues according to the severity and confidence (#2295) 2021-10-28 00:49:02 +02:00
dependabot[bot]
6edca924d3
build(deps): bump github.com/securego/gosec/v2 from 2.8.1 to 2.9.1 (#2299)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2021-10-19 00:20:49 +02:00
Ludovic Fernandez
8f3ad45e1c
gosec: add configuration (#1930) 2021-04-24 23:20:12 +02:00
Tim Heckman
60fd647987
Update gosec linter to v2; add .test files to .gitignore (#1062)
This change updates the `gosec` linter to its v2 version. It seems like v2
maintained API compatibility for the functionality we use, so we only needed to
update the dependency and imports.

Please note, this does not use a tagged version of `gosec` and instead is the
latest `master` commit due to this issue: https://github.com/securego/gosec/issues/470.
Once this issue is resolved we should update `gosec` to a tagged release.

This also adds a line to the `.gitignore` file, to ignore the `.test` output
files that get generated by `go test`. This could accidentally get left behind,
so no use committing binary files.

Fixes #1052
2020-05-03 14:05:00 +03:00
Andrew Shannon Brown
909f628d75 Add linter for nolint
Linter can check that nolint statements are properly formatted and also that all
nolint statements are used.
2020-04-26 20:20:17 -07:00
Hiroki Suezawa
7368dd3604 Update gosec and add column
Signed-off-by: Hiroki Suezawa <suezawa@gmail.com>
2020-01-04 17:08:51 -05:00
Isaev Denis
9ba730e989
Make incremental analysis (#808)
Cache linting results. Reanalyze only changed packages
and packages tree depending on them.

Fixes #768, fixes #809
2019-10-13 17:40:51 +03:00
Trevor Pounds
6d786b50ae Group imports by package. 2019-10-01 18:09:47 -04:00
Isaev Denis
95ec0cf21e
dramatically reduce memory usage (#758)
Run all linters per package. It allows unloading package data when it's
processed. It dramatically reduces memory (and CPU because of GC) usage.

Relates: #337
2019-09-30 16:19:41 +03:00
Trevor Pounds
e750fd1d15 Update to latest securego/gosec. (#694)
Fixes https://github.com/securego/gosec/pull/366.
2019-09-14 19:34:59 +03:00
Isaev Denis
bf67a3eef3
update gosec (#681) 2019-09-11 17:46:26 +03:00
Denis Isaev
d437ac8629 Implement auto-fixing for gofmt,goimports,misspell
Also, add more identifier marking patterns.
2019-02-17 20:31:31 +03:00
Denis Isaev
7705f82591 Update megacheck to the latest version
Also do following improvements:
  - show proper sublinter name for megacheck sublinters
  - refactor and make more simple and robust megacheck
  merging/optimizing
  - improve handling of unknown linter names in //nolint directives
  - minimize diff of our megacheck version from the upstream,
  https://github.com/golang/go/issues/29612 blocks usage of the upstream
  version
  - support the new `stylecheck` linter
  - improve tests coverage for megacheck and nolint related cases
  - update and use upstream versions of unparam and interfacer instead of forked
  ones
  - don't use golangci/tools repo anymore
  - fix newly found issues after updating linters

Also should be noted that megacheck works much faster and consumes less
memory in the newest release, therefore golangci-lint works noticeably
faster and consumes less memory for large repos.

Relates: #314
2019-01-08 21:16:15 +03:00