lint: enable gosec

Signed-off-by: Justin Chadwell <me@jedevc.com>
2025-07-30 23:28:04 +08:00 · 2023-02-01 10:11:56 +00:00
parent 48357ee0c6
commit 5da09f0c23
2 changed files with 8 additions and 1 deletions
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -22,6 +22,7 @@ linters:
    - staticcheck
    - typecheck
    - nolintlint
+    - gosec
  disable-all: true

 linters-settings:
@@ -32,6 +33,12 @@ linters-settings:
      # The io/ioutil package has been deprecated.
      # https://go.dev/doc/go1.16#ioutil
      - io/ioutil
+  gosec:
+    excludes:
+      - G204  # Audit use of command execution
+      - G402  # TLS MinVersion too low
+    config:
+      G306: "0644"

 issues:
  exclude-rules: