Skip to content

issues Search Results · repo:securego/gosec language:Go

Filter by

512 results
 (75 ms)

512 results

insecurego/gosec (press backspace or delete to remove)

Add a rule to warn about exported struct fields with JSON serialization that have a high chance of containing secrets. Many enterprise environments using structured logging simply rely on json serialization ...
  • alexandear
  • Opened 
    6 hours ago
  • #1416

https://groups.google.com/g/golang-announce/c/tVVHm9gnwl8
  • mjnowen
  • Opened 
    12 hours ago
  • #1414

Howdy! 🤠 Summary SSA panics are occurring when performing static analysis due to references not being included when build tags are involved. Description I ve been seeing static analysis panics occurring ...
  • matthewhartstonge
  • Opened 
    2 days ago
  • #1412

gosec is throwing a panic when we run into the CI and locally: gosec -exclude=G101,G107 -no-fail -fmt sarif -out results.sarif -exclude-generated ./... the code: https://github.com/atomone-hub/cosmos-sdk/pulls ...
  • Pantani
  • 2
  • Opened 
    10 days ago
  • #1410

I ve got a gosec SARIF that contains this block (truncated for clarity): { runs : [ { results : [ { fixes : [ { artifactChanges : null, description : { ...
bug
help wanted
  • komish
  • 2
  • Opened 
    21 days ago
  • #1407

Hello all, the gosec v2.22.10 (released yesterday) started to complain regarding false positives for G602 (CWE-118): slice index out of range for instance, the following code shouldn t generate warning, ...
bug
help wanted
  • dev-gto
  • 4
  • Opened 
    21 days ago
  • #1406

https://groups.google.com/g/golang-announce/c/YEyj6FUNbik
  • mjnowen
  • Opened 
    23 days ago
  • #1403

When installing gosec, the following warning pops up and the installation is canceled: # go install github.com/securego/gosec/v2/cmd/gosec@latest go: downloading github.com/securego/gosec/v2 v2.22.9 go: ...
  • ItsIgnacioPortal
  • 1
  • Opened 
    on Oct 7
  • #1400

seems like there is a error/panic being swallowed as that error in that current state is not really helpful [gosec] 2025/09/29 09:37:40 Panic when running SSA analyser on package: trace [gosec] 2025/09/29 ...
  • sruehl
  • 1
  • Opened 
    on Sep 29
  • #1394

apparently the sarif file is broken with github/codeql-action/upload-sarif@v3 Error: Unable to upload results.sarif as it is not valid SARIF: - instance.runs[0].results[26].fixes[0].description is not ...
bug
help wanted
  • sruehl
  • 7
  • Opened 
    on Sep 29
  • #1393
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue search results · GitHub