nolintlint

README

nolintlint

nolintlint is a Go static analysis tool to find ill-formed or insufficiently explained // nolint directives for golangci (or any other linter)

Installation

go get -u github.com/ashanbrown/nolintlint

Usage

nolintlint [flags...] packages...

Flags

• -set_exit_status (default false) - Set exit status to 1 if any issues are found.
• -machine (default false) - Always require //nolint instead of // nolint
• -specific (default true) - Always require //nolint:mylinter instead of just //nolint
• -explain (default true) - Always require //nolint // my explanation instead of just //nolint

Purpose

To ensure that lint exceptions have explanations. Consider the case below:

import "crypto/md5" //nolint

func hash(data []byte) []byte {
	return md5.New().Sum(data) //nolint
}

In the above case, nolint directives are present but the user has no idea why this is being done or which linter is being suppressed (in this case, gosec recommends against use of md5). nolintlint can require that the code provide an explanation, which might look as follows:

import "crypto/md5" //nolint:gosec // this is not used in a secure application

func hash(data []byte) []byte {
	return md5.New().Sum(data) //nolint:gosec // this result is not used in a secure application
}

nolintlint can also identify cases where you may have written // nolint. Finally nolintlint, can alsoenforce that you use the machine-readable nolint directive format //nolint and that you mention what linter is being suppressed, as shown above when we write //nolint:gosec.

TODO

Propose that this should be part of golangci-lint itself.

Contributing

Pull requests welcome!