chore(go): introduce gosec linter #9658
erikgbpr.yaml
on: pull_request
Publish js library
0s
Matrix: Upload Binary - Disabled
Annotations
10 errors and 5 warnings
|
CI Check Static Checks:
pkg/fluxinstall/product.go#L91
G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
CI Check Static Checks:
pkg/fluxinstall/product.go#L188
G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
CI Check Static Checks:
pkg/fluxexec/cmd.go#L33
G204: Subprocess launched with a potential tainted input or cmd arguments (gosec)
|
|
CI Check Static Checks:
pkg/utils/common_test.go#L106
G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
CI Check Static Checks:
pkg/utils/common_test.go#L118
G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
CI Check Static Checks:
pkg/validate/validate.go#L315
G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
CI Check Static Checks:
pkg/validate/validate.go#L309
G115: integer overflow conversion int64 -> uint32 (gosec)
|
|
CI Check Static Checks:
pkg/server/auth/auth.go#L5
G501: Blocklisted import crypto/md5: weak cryptographic primitive (gosec)
|
|
CI Check Static Checks:
pkg/server/auth/auth.go#L109
G401: Use of weak cryptographic primitive (gosec)
|
|
CI Check Static Checks:
pkg/oidc/check/server.go#L74
G102: Binds to all network interfaces (gosec)
|
|
CI Test Go
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CI Build Image (gitops) / build-push-image
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CI Build Image (gitops-server) / build-push-image
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CI Test JS
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CI Check Static Checks
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
weaveworks~weave-gitops~TE2YUI.dockerbuild
|
56.3 KB |
|
|
weaveworks~weave-gitops~ZQ6C0G.dockerbuild
|
67.9 KB |
|