Skip to content

v1.16.4

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Nov 18:48
· 2 commits to main since this release
v1.16.4
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: NOxv8dcZlMFz3wrLdHILVNSnF6xskqAjN3bnn0i7K30
Verified
Learn about vigilant mode.
5125785
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A documentation release. references/linting.md now explains how to reproduce the findings of the standalone gosec check locally and how to suppress them.

Linting

  • New subsection "Standalone gosec: Reproduce the CI Run, Suppress With #nosec". A gosec binary built with an older Go toolchain skips SSA analysis on newer code without failing, so SSA rules such as G115 report nothing locally while CI reports them; the subsection gives the go run …/gosec@latest command that matches CI, explains that standalone gosec reads #nosec and not //nolint, and shows how to check a suppression with gosec -nosec. Observed on netresearch/go-cron#440, by @CybotTM in #124.

Maintenance

  • pre-commit hooks: netresearch/skill-repo-skill v3.2.0 (#120) and ruff-pre-commit v0.17.3 (#125).
  • step-security/harden-runner v2.22.3 (#126).

Full Changelog: v1.16.3...v1.16.4

Contributors

CybotTM
Assets 8
Loading