Add NebulousLabs/glyphcheck as linter

[adamdecaf]

Your feature request related to a problem? Please describe.

Homoglyph attacks are an increasing concern for source code and currently hard to detect. There are some tools available for detecting suspect UTF-8 runes.

Describe the solution you'd like.

Including support for running a homoglyph linter would be a good first step.

Describe alternatives you've considered.

There are few if any good homoglyph linters available for the Go language. Perhaps a new linter should be written.

https://github.com/search?l=Go&q=homoglyph&type=Repositories

Additional context.

https://github.com/NebulousLabs/glyphcheck

[boring-cyborg]

Hey, thank you for opening your first Issue ! 🙂 If you would like to contribute we have a guide for contributors.

[bombsimon]

A liter needs to be written using the go/analysis package to be merged to golangci-lint. It doesn't look like any of the ones in the search result does this so someone would need to write a new linter for golangci-lint to pick it up.

[ldez]

Hello,

asciicheck already checks those cases.

https://golangci-lint.run/usage/linters/#disabled-by-default-linters--e--enable

Quick example:

.golangci.yml

linters:
  disable-all: true
  enable:
    - asciicheck

example.go

package sandbox

import "fmt"

func gitһub() {
	fmt.Println("Hello")
}

$ golangci-lint run
foo.go:7:6: identifier "gitһub" contain non-ASCII character: U+04BB 'һ' (asciicheck)
func gitһub() {
     ^

[ldez]

@adamdecaf you can follow the PR #2330