Detector: Go Linter

Detector: Go Linter

Wraps golangci-lint for Go code quality and security checks.

Property	Value
Name	go-linter
Tier	DETERMINISTIC
Languages	Go
External tool	golangci-lint
LLM required	No
Confidence	1.00

What it detects

Go lint issues from golangci-lint's metalinter suite — static analysis, vet checks, security (gosec), error handling (errcheck), and style.

How it works

1. Checks for Go project markers (go.mod or .go files)
2. Runs golangci-lint run --out-format=json --timeout=120s
3. Parses the JSON Issues array
4. Maps linter names to Sentinel severity levels

High-severity linters

Linter	Category
gosec	Security
govet	Correctness
staticcheck	Static analysis
errcheck	Error handling

Findings from these linters are elevated to HIGH severity.

Example finding

[GO-LINT] internal/handler.go:42 — gosec (G104)
  Errors unhandled
  Severity: HIGH, Confidence: 1.00

Prerequisites

# See https://golangci-lint.run/welcome/install/
go install github.com/golangci-lint/golangci-lint/cmd/golangci-lint@latest

Known limitations

• Requires golangci-lint installed and available in PATH
• 120-second golangci-lint internal timeout, 150-second subprocess timeout
• Skips vendor/ directory