volker.raschek/gosec-docker
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

chore(deps): update dependency securego/gosec to v2.21.3 #70

Merged
volker.raschek merged 1 commits from renovate/securego-gosec-2.x into master 2024-09-22 16:09:38 +00:00
Conversation 0 Commits 1 Files Changed 1 +1 -1
CSRBot commented 2024-05-14 16:05:36 +00:00
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change
securego/gosec minor v2.19.0 -> v2.21.3

Release Notes

securego/gosec (securego/gosec)

v2.21.3

Compare Source

Changelog

v2.21.2

Compare Source

Changelog

v2.21.1

Compare Source

Changelog

v2.21.0

Compare Source

Changelog

  • b278b40 Update cosign version to v2.4.0 in release github workflow (#​1207)
  • eaedce9 Improvement the int conversion overflow logic to handle bound checks (#​1194)
  • ea5b276 fix: G602 support for nested conditionals with bounds check (#​1201)
  • 11d6903 Update go.mod to sue go 1.22.0 toolchain
  • 655527d chore(deps): update all dependencies
  • 0898560 Make variable name more clear
  • ac67231 Make variable names more explicity and reduce duplications
  • e0414c4 Fix formatting
  • c7003fc Refactor to reduce some fuctions and variable names
  • 2401936 Pass the value argument directly since is an interface
  • f5d3128 Added suggested changes
  • a14ca4a Added another test case in order to increase code coverage
  • a6dd589 Removed function parameter which is always the same
  • b4c7469 Formatting problems(CI was not passing)
  • 7f8f654 Updated analyzer to use new way of initialization
  • a26215c Migrated the rule to the analyzers folder
  • 3f6e1e7 Refractored code a little bit
  • 0eb8143 Added new rule G407(hardcoded IV/nonce)
  • 4ae73c8 Fix conversion overflow false positive when using ParseUint
  • c52dc0e Add a build step to measure the scan perfomance
  • bcec04e Fix conversion overflow false positives when they are checked or pre-determined
  • 71e397b Update go.mod
  • aec45b0 chore(deps): update all dependencies
  • ab3f6c1 Fix false positive in conversion overflow check from uint8/int8 type
  • a39ec5a Disable staticcheck SA1019 rule
  • a1b2ab8 Update the golangci linters
  • 8467f01 Add more test to cover more use cases for G115 rule
  • 81cda2f Allow excluding analyzers globally (#​1180)
  • 18135b4 Update to Go 1.23.0 (#​1183)
  • 91c708a chore(deps): update all dependencies (#​1182)
  • 92bac42 Read the AI API key also from an environment variable (#​1181)
  • 56f943b Add support to generate auto fixes using LLM (AI) (#​1177)
  • f33fd4b chore(deps): update all dependencies
  • 55a47f3 chore(deps): update all dependencies
  • a5d9ef6 chore(deps): update all dependencies
  • 6842444 chore(deps): update dependency babel-standalone to v7.24.10
  • 08b94f9 Resolve underlying type to detect overflows in type aliases
  • 4487a0c chore(deps): update dependency babel-standalone to v7.24.8
  • 0076267 Fix multifile ignores
  • 2f1b81b Add -enable-audit cli flag
  • 87fcb9b Update to go 1.22.5 and 1.21.12
  • 466992f chore(deps): update all dependencies
  • 9a4a741 Added more rules
  • 6382394 Fixed coverage workflow
  • 5666ea3 Fixed CI workflow
  • fc0957f Minor changes
  • 58e4fcc Split the G401 rule into two separate ones
  • 2e71f37 Updated G401 corresponding CWE
  • 3edc633 chore(deps): update docker/build-push-action action to v6
  • 2ae137a Update to go versions to 1.21.11 and 1.22.4
  • 30a8a9c chore(deps): update all dependencies
  • ac75d44 Fix nosec when applied to a block
  • ed3f51e Add more types to templates rule
  • c3209fc Map the G115 rule to an CWE ID
  • 45fbb27 chore(deps): update all dependencies
  • 43bef71 Update README with G115 rule description
  • 555fe44 Remove deprecated megacheck linter from golangci
  • 81b076f Format imports
  • f775eb1 Update .gitignore
  • 4bf5667 Add a new rule to detect integer overflow on integer types conversion
  • 5f0084e feat: add env var to override the Go version detection
  • 75dd9d6 Use the proper logic when disabling the go module version
  • 1e1fc91 Update the README with some details related to Go version used by the rules
  • 9a03665 Add an environment varialbe which disables the parsing of Go version from module file
  • b633c4c chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
  • 40f29c8 Update docker image in action to v2.20.0

v2.20.0

Compare Source

Changelog

  • 6fbd381 Catch os.ModePerm permissions in os.WriteFile
  • dc5e5a9 Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions
  • 417a44c Add filepath.EvalSymlinks to clean functions in rule G304
  • d34f8b7 chore(deps): update all dependencies
  • 8658b8e Update Go to version 2.22.3 in CI and release
  • d3b2359 chore(deps): update module golang.org/x/text to v0.15.0
  • cf29d54 chore(deps): update all dependencies
  • 09d62bd chore(deps): update module github.com/onsi/gomega to v1.33.0
  • 3b23ec8 Update to go 1.22.2
  • 31009c3 chore(deps): update all dependencies
  • daf6f67 chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  • e27f442 chore(deps): update all dependencies
  • 5513615 fix(helpers/goversion): get from go.mod
  • 43b8b75 chore: fix function name
  • accd7a1 chore(deps): update all dependencies
  • 48aa72e Format the imports using the gci tool
  • b6df69c Fixup: delete unused variable
  • ccb0a08 Fix test: update test to comply with the spec of generated sources
  • 3a0ea51 Refactor: use standard function to check if a file is generated
  • 11c3252 Fix lint warnings
  • be378e6 Add support for math/rand/v2 added in Go 1.22
  • 36878a9 Skip the G601 tests for Go version 1.22
  • 903c75b Update go version to 1.22.1 and 1.21.8
  • f25ccd9 Ignore 'implicit memory aliasing' rule for Go 1.22+
  • 582e91a chore(deps): update all dependencies
  • 198a40c chore(deps): update module golang.org/x/tools to v0.18.0
  • c824a5d fix(hardcoded): remove duplicated Stripe API Key
  • d13d7da Update gosec version to v2.19.0 in the Github action

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [securego/gosec](https://github.com/securego/gosec) | minor | `v2.19.0` -> `v2.21.3` | --- ### Release Notes <details> <summary>securego/gosec (securego/gosec)</summary> ### [`v2.21.3`](https://github.com/securego/gosec/releases/tag/v2.21.3) [Compare Source](https://github.com/securego/gosec/compare/v2.21.2...v2.21.3) #### Changelog - [`be8bd6e`](https://github.com/securego/gosec/commit/be8bd6e40be105333f2bc783ba8d688154441559) Populate the fixes only when autofix is not empty ([#&#8203;1226](https://github.com/securego/gosec/issues/1226)) - [`3004932`](https://github.com/securego/gosec/commit/30049320058a3d116f9f0d3a98c7fdf3fedc20af) chore(deps): update all dependencies ([#&#8203;1223](https://github.com/securego/gosec/issues/1223)) - [`1f3bdd9`](https://github.com/securego/gosec/commit/1f3bdd93493b70e06e508b51ea7ad757e8f2f21e) G115 Struct Attribute Checks ([#&#8203;1221](https://github.com/securego/gosec/issues/1221)) - [`5f3194b`](https://github.com/securego/gosec/commit/5f3194b581979e508b0ba1ee22f1f1f85a314e16) Update the github action to v2.21.2 ([#&#8203;1218](https://github.com/securego/gosec/issues/1218)) ### [`v2.21.2`](https://github.com/securego/gosec/releases/tag/v2.21.2) [Compare Source](https://github.com/securego/gosec/compare/v2.21.1...v2.21.2) #### Changelog - [`abfe8cf`](https://github.com/securego/gosec/commit/abfe8cfd6d5687c96abf31f8e7f57982df2a6e4f) Update the SARIF schema URL ([#&#8203;1217](https://github.com/securego/gosec/issues/1217)) - [`0396179`](https://github.com/securego/gosec/commit/0396179112d5e2071365e5ecb2a75d77e90852f8) Update go version to 1.23.1 and 1.22.7 ([#&#8203;1216](https://github.com/securego/gosec/issues/1216)) - [`5e53c8b`](https://github.com/securego/gosec/commit/5e53c8b9f7f77380e95960e6095392f49977e63d) chore(deps): update all dependencies ([#&#8203;1215](https://github.com/securego/gosec/issues/1215)) - [`014751c`](https://github.com/securego/gosec/commit/014751c91c04fe3fe05e381dea9faadbd4ce8e78) Update gosec version to v2.21.1 in github action ([#&#8203;1213](https://github.com/securego/gosec/issues/1213)) ### [`v2.21.1`](https://github.com/securego/gosec/releases/tag/v2.21.1) [Compare Source](https://github.com/securego/gosec/compare/v2.21.0...v2.21.1) #### Changelog - [`0ce4453`](https://github.com/securego/gosec/commit/0ce4453ddd8cca1291d2056cf903b545baad95a0) Rollback the SARIF version to 2.1 since github doesn't support 2.2 ([#&#8203;1210](https://github.com/securego/gosec/issues/1210)) - [`ea26e84`](https://github.com/securego/gosec/commit/ea26e8431f53a5d229b1c07ffe3529008a01c25e) Update gosec in github action to v2.21.0 ([#&#8203;1208](https://github.com/securego/gosec/issues/1208)) ### [`v2.21.0`](https://github.com/securego/gosec/releases/tag/v2.21.0) [Compare Source](https://github.com/securego/gosec/compare/v2.20.0...v2.21.0) #### Changelog - [`b278b40`](https://github.com/securego/gosec/commit/b278b40c5266eb2b52f41c57d9e6509d9360a2a6) Update cosign version to v2.4.0 in release github workflow ([#&#8203;1207](https://github.com/securego/gosec/issues/1207)) - [`eaedce9`](https://github.com/securego/gosec/commit/eaedce9a8b64ce207e25553232bcc7541e0044e7) Improvement the int conversion overflow logic to handle bound checks ([#&#8203;1194](https://github.com/securego/gosec/issues/1194)) - [`ea5b276`](https://github.com/securego/gosec/commit/ea5b2766bb1abd38e13375c0e2d789f8ab2b789c) fix: G602 support for nested conditionals with bounds check ([#&#8203;1201](https://github.com/securego/gosec/issues/1201)) - [`11d6903`](https://github.com/securego/gosec/commit/11d69032b0856c96afd4c493967ab7a30e20ff5e) Update go.mod to sue go 1.22.0 toolchain - [`655527d`](https://github.com/securego/gosec/commit/655527dfb4df16091cbdc0a10bd89c2d5d9312a5) chore(deps): update all dependencies - [`0898560`](https://github.com/securego/gosec/commit/08985601695d7b6eb13330521c80859adc9d72aa) Make variable name more clear - [`ac67231`](https://github.com/securego/gosec/commit/ac67231ec5a73f1525942d5ef482d1152e61ac3f) Make variable names more explicity and reduce duplications - [`e0414c4`](https://github.com/securego/gosec/commit/e0414c46402de6813677e1868b6c0f82270fdb80) Fix formatting - [`c7003fc`](https://github.com/securego/gosec/commit/c7003fc7e5e7f05783097793d4410d50896e06d4) Refactor to reduce some fuctions and variable names - [`2401936`](https://github.com/securego/gosec/commit/2401936458ea4c80b8c83a3500d9354ca3914605) Pass the value argument directly since is an interface - [`f5d3128`](https://github.com/securego/gosec/commit/f5d312825f753d7c598fcd5e80e2c9c6f9cb1776) Added suggested changes - [`a14ca4a`](https://github.com/securego/gosec/commit/a14ca4ac59d9b519d1b195afe6098ff13d574d32) Added another test case in order to increase code coverage - [`a6dd589`](https://github.com/securego/gosec/commit/a6dd589bae11a5eb18408a4a75e63e46833a01a3) Removed function parameter which is always the same - [`b4c7469`](https://github.com/securego/gosec/commit/b4c746962f33c83ec64ce337e546bd0cc6529cd1) Formatting problems(CI was not passing) - [`7f8f654`](https://github.com/securego/gosec/commit/7f8f654235b42704bab6c65c3459a2824bccadd3) Updated analyzer to use new way of initialization - [`a26215c`](https://github.com/securego/gosec/commit/a26215cf23be85d473f6d5a1e059a02406ea5d55) Migrated the rule to the analyzers folder - [`3f6e1e7`](https://github.com/securego/gosec/commit/3f6e1e7326fe7849aaaaf35698907a1a7c504997) Refractored code a little bit - [`0eb8143`](https://github.com/securego/gosec/commit/0eb8143c23b649a345370fd169baff6525c34bd9) Added new rule G407(hardcoded IV/nonce) - [`4ae73c8`](https://github.com/securego/gosec/commit/4ae73c8ba3a6b38e3c1bafad75f59cb4910e389f) Fix conversion overflow false positive when using ParseUint - [`c52dc0e`](https://github.com/securego/gosec/commit/c52dc0ea4e0fed5898f6b1d1f1028bd20ac0fa86) Add a build step to measure the scan perfomance - [`bcec04e`](https://github.com/securego/gosec/commit/bcec04e784830d45797201cb889246bf266cd941) Fix conversion overflow false positives when they are checked or pre-determined - [`71e397b`](https://github.com/securego/gosec/commit/71e397b9944c50b3f8f9e0e3e1904047c7b3967e) Update go.mod - [`aec45b0`](https://github.com/securego/gosec/commit/aec45b0b7dd15c03d89d67e16b93f41df8ece85b) chore(deps): update all dependencies - [`ab3f6c1`](https://github.com/securego/gosec/commit/ab3f6c1c83a0c80fcb8c95838de10cc3cf0d8ba2) Fix false positive in conversion overflow check from uint8/int8 type - [`a39ec5a`](https://github.com/securego/gosec/commit/a39ec5a16bca81f2442050ce3d2d442911ace4cc) Disable staticcheck SA1019 rule - [`a1b2ab8`](https://github.com/securego/gosec/commit/a1b2ab80af682c279271a7d3e3cf939e0e5c2847) Update the golangci linters - [`8467f01`](https://github.com/securego/gosec/commit/8467f012e0d6238433e299fd0499ee29342000c3) Add more test to cover more use cases for G115 rule - [`81cda2f`](https://github.com/securego/gosec/commit/81cda2f91fbe1bf4735feb55febcae03e697a92b) Allow excluding analyzers globally ([#&#8203;1180](https://github.com/securego/gosec/issues/1180)) - [`18135b4`](https://github.com/securego/gosec/commit/18135b439cbafc52ac712528099193a0d6b18a33) Update to Go 1.23.0 ([#&#8203;1183](https://github.com/securego/gosec/issues/1183)) - [`91c708a`](https://github.com/securego/gosec/commit/91c708a62031dd4b92ae057c8835b975bf80c134) chore(deps): update all dependencies ([#&#8203;1182](https://github.com/securego/gosec/issues/1182)) - [`92bac42`](https://github.com/securego/gosec/commit/92bac42afce8fee2756fb7d7f491328bd069ebec) Read the AI API key also from an environment variable ([#&#8203;1181](https://github.com/securego/gosec/issues/1181)) - [`56f943b`](https://github.com/securego/gosec/commit/56f943b802579b69d96f0999a7943c588e600ae7) Add support to generate auto fixes using LLM (AI) ([#&#8203;1177](https://github.com/securego/gosec/issues/1177)) - [`f33fd4b`](https://github.com/securego/gosec/commit/f33fd4bf29722188b24b4a55b512d12adcd8b216) chore(deps): update all dependencies - [`55a47f3`](https://github.com/securego/gosec/commit/55a47f37740ea50048d4396051e2a60c794bec1d) chore(deps): update all dependencies - [`a5d9ef6`](https://github.com/securego/gosec/commit/a5d9ef67e2c945ab409da174596ee8be564633fe) chore(deps): update all dependencies - [`6842444`](https://github.com/securego/gosec/commit/68424445af83e15ed94b4d9b26ee00089d2a87d6) chore(deps): update dependency babel-standalone to v7.24.10 - [`08b94f9`](https://github.com/securego/gosec/commit/08b94f9392935d370dfa208af1c526477865cdf6) Resolve underlying type to detect overflows in type aliases - [`4487a0c`](https://github.com/securego/gosec/commit/4487a0c5a233e90ed46450fee36bad20cf9dcebe) chore(deps): update dependency babel-standalone to v7.24.8 - [`0076267`](https://github.com/securego/gosec/commit/007626773c6c47884c59b02f49f91de8ba168917) Fix multifile ignores - [`2f1b81b`](https://github.com/securego/gosec/commit/2f1b81b8894fa2d69a6257d4c968a8f17d7e7fd4) Add -enable-audit cli flag - [`87fcb9b`](https://github.com/securego/gosec/commit/87fcb9b95baf7ce007b5db1dd92405351dca6dcc) Update to go 1.22.5 and 1.21.12 - [`466992f`](https://github.com/securego/gosec/commit/466992feca6e21a9a8f9bbcf69f65914ffacfcfe) chore(deps): update all dependencies - [`9a4a741`](https://github.com/securego/gosec/commit/9a4a741e6b3757a6063bbb52e1d139b193a33398) Added more rules - [`6382394`](https://github.com/securego/gosec/commit/6382394ce8fe66c4b3b5051891254792004e95ff) Fixed coverage workflow - [`5666ea3`](https://github.com/securego/gosec/commit/5666ea35bafdcdbf6550f4b118ce5d0504447782) Fixed CI workflow - [`fc0957f`](https://github.com/securego/gosec/commit/fc0957f6a3b0d1c0db43ea72266daab41143c4d9) Minor changes - [`58e4fcc`](https://github.com/securego/gosec/commit/58e4fccc1382194f682ee8f97860f5b9c7aa491a) Split the G401 rule into two separate ones - [`2e71f37`](https://github.com/securego/gosec/commit/2e71f37efda759fa68989fa3ece93623ff762945) Updated G401 corresponding CWE - [`3edc633`](https://github.com/securego/gosec/commit/3edc633c241a32da17c6b2fcbb092192a583ee4e) chore(deps): update docker/build-push-action action to v6 - [`2ae137a`](https://github.com/securego/gosec/commit/2ae137abcf405533ad6e549e9363e58e4f6e8b7d) Update to go versions to 1.21.11 and 1.22.4 - [`30a8a9c`](https://github.com/securego/gosec/commit/30a8a9c8c303c881a56c7bc0fb1c06e237779d49) chore(deps): update all dependencies - [`ac75d44`](https://github.com/securego/gosec/commit/ac75d44f5635e83e6e91347f7350f1b3c87ee5af) Fix nosec when applied to a block - [`ed3f51e`](https://github.com/securego/gosec/commit/ed3f51e66358b0b4beea512a4edabc6116e972ff) Add more types to templates rule - [`c3209fc`](https://github.com/securego/gosec/commit/c3209fcaac0b14cc2dcb057dcebb60fa35e274e2) Map the G115 rule to an CWE ID - [`45fbb27`](https://github.com/securego/gosec/commit/45fbb27d87864c1cf2f9c71896ab1660eab47a91) chore(deps): update all dependencies - [`43bef71`](https://github.com/securego/gosec/commit/43bef719b47ff8de56265f54dc0d0a9c4afe13c9) Update README with G115 rule description - [`555fe44`](https://github.com/securego/gosec/commit/555fe448dd8931e33a6d8cb3a534d8190938fa61) Remove deprecated megacheck linter from golangci - [`81b076f`](https://github.com/securego/gosec/commit/81b076f53d65314e4c73473c012e7ce94bed11aa) Format imports - [`f775eb1`](https://github.com/securego/gosec/commit/f775eb19c51d9b80b53eeca466007516a2d8b5f0) Update .gitignore - [`4bf5667`](https://github.com/securego/gosec/commit/4bf5667f6673c43d356235086ecfe41f5bb5ca7b) Add a new rule to detect integer overflow on integer types conversion - [`5f0084e`](https://github.com/securego/gosec/commit/5f0084eb01a99a1ef3718afcb2f4078e8d07326f) feat: add env var to override the Go version detection - [`75dd9d6`](https://github.com/securego/gosec/commit/75dd9d61ff96be391e3410fee384c87fdf7566d5) Use the proper logic when disabling the go module version - [`1e1fc91`](https://github.com/securego/gosec/commit/1e1fc91d158706e3bca507a749c72070c361aade) Update the README with some details related to Go version used by the rules - [`9a03665`](https://github.com/securego/gosec/commit/9a036658b7b1eab8f226171e72319ec2e9e84176) Add an environment varialbe which disables the parsing of Go version from module file - [`b633c4c`](https://github.com/securego/gosec/commit/b633c4c0ec489dfc2f4930bb96237371058cb199) chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3 - [`40f29c8`](https://github.com/securego/gosec/commit/40f29c8d4abf59af475a79f6aa0268c296319501) Update docker image in action to v2.20.0 ### [`v2.20.0`](https://github.com/securego/gosec/releases/tag/v2.20.0) [Compare Source](https://github.com/securego/gosec/compare/v2.19.0...v2.20.0) #### Changelog - [`6fbd381`](https://github.com/securego/gosec/commit/6fbd381) Catch os.ModePerm permissions in os.WriteFile - [`dc5e5a9`](https://github.com/securego/gosec/commit/dc5e5a9) Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions - [`417a44c`](https://github.com/securego/gosec/commit/417a44c) Add filepath.EvalSymlinks to clean functions in rule G304 - [`d34f8b7`](https://github.com/securego/gosec/commit/d34f8b7) chore(deps): update all dependencies - [`8658b8e`](https://github.com/securego/gosec/commit/8658b8e) Update Go to version 2.22.3 in CI and release - [`d3b2359`](https://github.com/securego/gosec/commit/d3b2359) chore(deps): update module golang.org/x/text to v0.15.0 - [`cf29d54`](https://github.com/securego/gosec/commit/cf29d54) chore(deps): update all dependencies - [`09d62bd`](https://github.com/securego/gosec/commit/09d62bd) chore(deps): update module github.com/onsi/gomega to v1.33.0 - [`3b23ec8`](https://github.com/securego/gosec/commit/3b23ec8) Update to go 1.22.2 - [`31009c3`](https://github.com/securego/gosec/commit/31009c3) chore(deps): update all dependencies - [`daf6f67`](https://github.com/securego/gosec/commit/daf6f67) chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 - [`e27f442`](https://github.com/securego/gosec/commit/e27f442) chore(deps): update all dependencies - [`5513615`](https://github.com/securego/gosec/commit/5513615) fix(helpers/goversion): get from go.mod - [`43b8b75`](https://github.com/securego/gosec/commit/43b8b75) chore: fix function name - [`accd7a1`](https://github.com/securego/gosec/commit/accd7a1) chore(deps): update all dependencies - [`48aa72e`](https://github.com/securego/gosec/commit/48aa72e) Format the imports using the gci tool - [`b6df69c`](https://github.com/securego/gosec/commit/b6df69c) Fixup: delete unused variable - [`ccb0a08`](https://github.com/securego/gosec/commit/ccb0a08) Fix test: update test to comply with the spec of generated sources - [`3a0ea51`](https://github.com/securego/gosec/commit/3a0ea51) Refactor: use standard function to check if a file is generated - [`11c3252`](https://github.com/securego/gosec/commit/11c3252) Fix lint warnings - [`be378e6`](https://github.com/securego/gosec/commit/be378e6) Add support for math/rand/v2 added in Go 1.22 - [`36878a9`](https://github.com/securego/gosec/commit/36878a9) Skip the G601 tests for Go version 1.22 - [`903c75b`](https://github.com/securego/gosec/commit/903c75b) Update go version to 1.22.1 and 1.21.8 - [`f25ccd9`](https://github.com/securego/gosec/commit/f25ccd9) Ignore 'implicit memory aliasing' rule for Go 1.22+ - [`582e91a`](https://github.com/securego/gosec/commit/582e91a) chore(deps): update all dependencies - [`198a40c`](https://github.com/securego/gosec/commit/198a40c) chore(deps): update module golang.org/x/tools to v0.18.0 - [`c824a5d`](https://github.com/securego/gosec/commit/c824a5d) fix(hardcoded): remove duplicated `Stripe API Key` - [`d13d7da`](https://github.com/securego/gosec/commit/d13d7da) Update gosec version to v2.19.0 in the Github action </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjYuMCIsInVwZGF0ZWRJblZlciI6IjM4Ljg4LjAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->
CSRBot added 1 commit 2024-05-14 16:05:38 +00:00
chore(deps): update dependency securego/gosec to v2.20.0
All checks were successful
continuous-integration/drone/pr Build is passing
Details
continuous-integration/drone/push Build is passing
Details
6b9a68dd99
volker.raschek was assigned by CSRBot 2024-05-14 16:05:38 +00:00
CSRBot force-pushed renovate/securego-gosec-2.x from 6b9a68dd99 to d5f3a282ba 2024-05-20 16:09:01 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from d5f3a282ba to 732e10b463 2024-05-27 16:09:26 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from 732e10b463 to a85c67d7a7 2024-07-13 19:16:17 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from a85c67d7a7 to 7dc4945d63 2024-07-13 22:09:44 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from 7dc4945d63 to 6a056a521d 2024-07-14 01:10:16 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from 6a056a521d to ff183b5435 2024-07-16 01:20:42 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from ff183b5435 to d511ea11e3 2024-07-16 19:11:10 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from d511ea11e3 to faf6860c66 2024-07-23 22:12:26 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from faf6860c66 to d70cc8739a 2024-07-26 13:10:45 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from d70cc8739a to 3b19bc1151 2024-08-18 19:14:42 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from 3b19bc1151 to 3544571dfe 2024-08-18 22:10:59 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from 3544571dfe to d54492c326 2024-08-22 19:14:05 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from d54492c326 to eaba586a67 2024-09-03 22:11:00 +00:00 Compare
CSRBot changed title from chore(deps): update dependency securego/gosec to v2.20.0 to chore(deps): update dependency securego/gosec to v2.21.1 2024-09-04 16:14:29 +00:00
CSRBot force-pushed renovate/securego-gosec-2.x from eaba586a67 to 24b5d97564 2024-09-04 16:14:32 +00:00 Compare
CSRBot force-pushed renovate/securego-gosec-2.x from 24b5d97564 to 660e6c0db8 2024-09-09 16:16:52 +00:00 Compare
CSRBot changed title from chore(deps): update dependency securego/gosec to v2.21.1 to chore(deps): update dependency securego/gosec to v2.21.2 2024-09-09 16:16:54 +00:00
CSRBot force-pushed renovate/securego-gosec-2.x from 660e6c0db8 to 52bf0fffc5 2024-09-18 13:15:21 +00:00 Compare
CSRBot changed title from chore(deps): update dependency securego/gosec to v2.21.2 to chore(deps): update dependency securego/gosec to v2.21.3 2024-09-18 13:15:23 +00:00
CSRBot force-pushed renovate/securego-gosec-2.x from 52bf0fffc5 to 13d94b39c9 2024-09-18 16:15:49 +00:00 Compare
volker.raschek merged commit 027f00148c into master 2024-09-22 16:09:38 +00:00
volker.raschek deleted branch renovate/securego-gosec-2.x 2024-09-22 16:09:39 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug

Something is not working

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
question

More information is needed

  
wontfix

This won't be fixed

No Label
bug
duplicate
enhancement
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
volker.raschek
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/gosec-docker#70
No description provided.
Delete Branch "renovate/securego-gosec-2.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?