gosec: add G602 analyzer (#4906)

ldez · web-flow · commit ca0b09e5e389 · 2024-08-14T23:54:30.000+02:00
diff --git a/.golangci.next.reference.yml b/.golangci.next.reference.yml
@@ -874,7 +874,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # To specify a set of rules to explicitly exclude.
     # Available rules: https://github.com/securego/gosec#available-rules
@@ -914,7 +913,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # Exclude generated files
     # Default: false
diff --git a/.golangci.reference.yml b/.golangci.reference.yml
@@ -874,7 +874,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # To specify a set of rules to explicitly exclude.
     # Available rules: https://github.com/securego/gosec#available-rules
@@ -914,7 +913,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # Exclude generated files
     # Default: false
diff --git a/jsonschema/golangci.jsonschema.json b/jsonschema/golangci.jsonschema.json
@@ -157,8 +157,7 @@
         "G503",
         "G504",
         "G505",
-        "G601",
-        "G602"
+        "G601"
       ]
     },
     "govet-analyzers": {
diff --git a/jsonschema/golangci.next.jsonschema.json b/jsonschema/golangci.next.jsonschema.json
@@ -157,8 +157,7 @@
         "G503",
         "G504",
         "G505",
-        "G601",
-        "G602"
+        "G601"
       ]
     },
     "govet-analyzers": {
diff --git a/pkg/golinters/gosec/gosec.go b/pkg/golinters/gosec/gosec.go
@@ -77,6 +77,7 @@ func runGoSec(lintCtx *linter.Context, pass *analysis.Pass, settings *config.GoS
 	}
 
 	analyzer.CheckRules(pkg)
+	analyzer.CheckAnalyzers(pkg)
 
 	secIssues, _, _ := analyzer.Report()
 	if len(secIssues) == 0 {

-Original file line number
+Diff line change
         "G503",
         "G504",
         "G505",
 -        "G601",
 -        "G602"
 +        "G601"
+      ]
     },
     "govet-analyzers": {
Original file line number	Diff line number	Diff line change
`@@ -77,6 +77,7 @@ func runGoSec(lintCtx linter.Context, pass analysis.Pass, settings *config.GoS`
`77`	`77`	`}`
`78`	`78`
`79`	`79`	`analyzer.CheckRules(pkg)`
	`80`	`+ analyzer.CheckAnalyzers(pkg)`
`80`	`81`
`81`	`82`	`secIssues, _, _ := analyzer.Report()`
`82`	`83`	`if len(secIssues) == 0 {`