diff --git a/scanners/boostsecurityio/gosec/module.yaml b/scanners/boostsecurityio/gosec/module.yaml index ebd6c308..0e16e097 100644 --- a/scanners/boostsecurityio/gosec/module.yaml +++ b/scanners/boostsecurityio/gosec/module.yaml @@ -16,7 +16,7 @@ steps: - scan: command: docker: - image: securego/gosec:2.16.0@sha256:c63f91e8d6af392313b24de92d1e35fb61306ddb8231ef0f112e3e4f0d8e96fc + image: securego/gosec:2.20.0@sha256:484c5a420c9bff73e365de264d86cbb279f332a07d9b31a0b8e1ad6e79fc3701 command: -fmt sarif -no-fail -track-suppressions ./... workdir: /app environment: diff --git a/scanners/boostsecurityio/gosec/rules.yaml b/scanners/boostsecurityio/gosec/rules.yaml index 9b48a79e..8729a3d4 100644 --- a/scanners/boostsecurityio/gosec/rules.yaml +++ b/scanners/boostsecurityio/gosec/rules.yaml @@ -123,6 +123,17 @@ rules: description: The software does not restrict or incorrectly restricts operations within the boundaries of a resource. ref: https://cwe.mitre.org/data/definitions/119.html + G602: + categories: + - ALL + - cwe-118 + - boost-hardened + group: top10-insecure-design + name: G602 + pretty_name: "G602: Slice access out of bounds" + description: The software does not restrict or incorrectly restricts operations + within the boundaries of a resource that is accessed using an index or pointer. + ref: https://cwe.mitre.org/data/definitions/118.html G109: categories: - ALL