Support the math/rand/v2 added in Go 1.22

[hyorimitsu]

Summary

In Go 1.22, the math/rand/v2 package has been added. Is it necessary to change G404 or create a new G405?

math/rand	math/rand/v2
Intn	IntN
Int31	Int32
Int31n	Int32N
Int63	Int64
Int64n	Int64N
-	Uint32
-	Uint32N
-	Uint64
-	Uint64N
-	Uint
-	UintN
-	N

Steps to reproduce the behavior

func RandomString(letters []byte, n int) string {
	b := make([]byte, n)
	for i := range n {
		b[i] = letters[rand.IntN(len(letters))]
	}
	return string(b)
}

gosec version

v2.19.0

Go version (output of 'go version')

go version go1.22.0

Operating system / Environment

Expected behavior

Raised a security fatal

Actual behavior

No error

[ccojocar]

I would enhance the existing rule to support the rand v2.

[hyorimitsu]

@ccojocar
Thank you for your suggestion! Would it be alright if I take care of implementing it on my end?

[ccojocar]

Yes, please go ahead!

[ccojocar]

fixed by #1112