gosec

Aug 14, 2023

Changes in this version

+ func GetIdentStringValuesRecursive(ident *ast.Ident) []string

+ func GetStringRecursive(n ast.Node) (string, error)

+ func NoSecTag(tag string) string

May 17, 2023

Changes in this version

type Analyzer

+ func (gosec *Analyzer) CheckAnalyzers(pkg *packages.Package)

+ func (gosec *Analyzer) CheckRules(pkg *packages.Package)

type Context

+ func (ctx *Context) GetFileAtNodePos(node ast.Node) *token.File

+ func (ctx *Context) NewIssue(node ast.Node, ruleID, desc string, severity, confidence issue.Score) *issue.Issue

type GlobalOption

+ const SSA

Oct 17, 2022

Changes in this version

+ func GetImportedNames(path string, ctx *Context) (names []string, found bool)

Aug 15, 2022

Changes in this version

+ func GetAliasedName(path string, ctx *Context) (string, bool)

Jun 13, 2022

Changes in this version

+ func GoVersion() (int, int, int)

Jan 17, 2022

Changes in this version

type GlobalOption

+ const ExcludeRules

+ const IncludeRules

Dec 9, 2021

Changes in this version

type Issue

+ Suppressions []SuppressionInfo

+ func (i *Issue) WithSuppressions(suppressions []SuppressionInfo) *Issue

type RuleSet

+ RuleSuppressedMap map[string]bool

+ Rules map[reflect.Type][]Rule

+ func (r RuleSet) IsRuleSuppressed(ruleID string) bool

+ type SuppressionInfo struct

+ Justification string

+ Kind string

Oct 14, 2021

Changes in this version

type GlobalOption

+ const ShowIgnored

type Issue

+ NoSec bool

May 26, 2021

Changes in this version

+ func GetCweByRule(id string) *cwe.Weakness

+ type ReportInfo struct

+ Errors map[string][]Error

+ GosecVersion string

+ Issues []*Issue

+ Stats *Metrics

+ func NewReportInfo(issues []*Issue, metrics *Metrics, errors map[string][]Error) *ReportInfo

+ func (r *ReportInfo) WithVersion(version string) *ReportInfo

Jul 7, 2020

Changes in this version

+ const SnippetOffset

+ func GetBinaryExprOperands(be *ast.BinaryExpr) []ast.Node

Apr 24, 2020

Changes in this version

+ const Globals

+ const LoadMode

+ var IssueToCWE = map[string]Cwe

+ func ConcatString(n *ast.BinaryExpr) (string, bool)

+ func ExcludedDirsRegExp(excludedDirs []string) []*regexp.Regexp

+ func FindVarIdentities(n *ast.BinaryExpr, c *Context) ([]*ast.Ident, bool)

+ func GetCallInfo(n ast.Node, ctx *Context) (string, string, error)

+ func GetCallObject(n ast.Node, ctx *Context) (*ast.CallExpr, types.Object)

+ func GetCallStringArgsValues(n ast.Node, ctx *Context) []string

+ func GetChar(n ast.Node) (byte, error)

+ func GetFloat(n ast.Node) (float64, error)

+ func GetIdentStringValues(ident *ast.Ident) []string

+ func GetImportPath(name string, ctx *Context) (string, bool)

+ func GetImportedName(path string, ctx *Context) (string, bool)

+ func GetInt(n ast.Node) (int64, error)

+ func GetLocation(n ast.Node, ctx *Context) (string, int)

+ func GetPkgAbsPath(pkgPath string) (string, error)

+ func GetPkgRelativePath(path string) (string, error)

+ func GetString(n ast.Node) (string, error)

+ func Getenv(key, userDefault string) string

+ func Gopath() []string

+ func MatchCallByPackage(n ast.Node, c *Context, pkg string, names ...string) (*ast.CallExpr, bool)

+ func MatchCompLit(n ast.Node, ctx *Context, required string) *ast.CompositeLit

+ func PackagePaths(root string, excludes []*regexp.Regexp) ([]string, error)

+ func RootPath(root string) (string, error)

+ func TryResolve(n ast.Node, c *Context) bool

+ type Analyzer struct

+ func NewAnalyzer(conf Config, tests bool, logger *log.Logger) *Analyzer

+ func (gosec *Analyzer) AppendError(file string, err error)

+ func (gosec *Analyzer) Check(pkg *packages.Package)

+ func (gosec *Analyzer) Config() Config

+ func (gosec *Analyzer) LoadRules(ruleDefinitions map[string]RuleBuilder)

+ func (gosec *Analyzer) ParseErrors(pkg *packages.Package) error

+ func (gosec *Analyzer) Process(buildTags []string, packagePaths ...string) error

+ func (gosec *Analyzer) Report() ([]*Issue, *Metrics, map[string][]Error)

+ func (gosec *Analyzer) Reset()

+ func (gosec *Analyzer) SetConfig(conf Config)

+ func (gosec *Analyzer) Visit(n ast.Node) ast.Visitor

+ type CallList map[string]set

+ func NewCallList() CallList

+ func (c CallList) Add(selector, ident string)

+ func (c CallList) AddAll(selector string, idents ...string)

+ func (c CallList) Contains(selector, ident string) bool

+ func (c CallList) ContainsCallExpr(n ast.Node, ctx *Context) *ast.CallExpr

+ func (c CallList) ContainsPkgCallExpr(n ast.Node, ctx *Context, stripVendor bool) *ast.CallExpr

+ func (c CallList) ContainsPointer(selector, indent string) bool

+ type Config map[string]interface

+ func (c Config) Get(section string) (interface{}, error)

+ func (c Config) GetGlobal(option GlobalOption) (string, error)

+ func (c Config) IsGlobalEnabled(option GlobalOption) (bool, error)

+ func (c Config) ReadFrom(r io.Reader) (int64, error)

+ func (c Config) Set(section string, value interface{})

+ func (c Config) SetGlobal(option GlobalOption, value string)

+ func (c Config) WriteTo(w io.Writer) (int64, error)

+ func NewConfig() Config

+ type Context struct

+ Comments ast.CommentMap

+ Config Config

+ FileSet *token.FileSet

+ Ignores []map[string]bool

+ Imports *ImportTracker

+ Info *types.Info

+ PassedValues map[string]interface{}

+ Pkg *types.Package

+ PkgFiles []*ast.File

+ Root *ast.File

+ type Cwe struct

+ ID string

+ URL string

+ func GetCwe(id string) Cwe

+ type Error struct

+ Column int

+ Err string

+ Line int

+ func NewError(line, column int, err string) *Error

+ type GlobalOption string

+ const Audit

+ const NoSecAlternative

+ const Nosec

+ type ImportTracker struct

+ Aliased map[string]string

+ Imported map[string]string

+ InitOnly map[string]bool

+ func NewImportTracker() *ImportTracker

+ func (t *ImportTracker) TrackFile(file *ast.File)

+ func (t *ImportTracker) TrackImport(n ast.Node)

+ func (t *ImportTracker) TrackPackages(pkgs ...*types.Package)

+ type Issue struct

+ Code string

+ Col string

+ Confidence Score

+ Cwe Cwe

+ File string

+ Line string

+ RuleID string

+ Severity Score

+ What string

+ func NewIssue(ctx *Context, node ast.Node, ruleID, desc string, severity Score, ...) *Issue

+ func (i Issue) FileLocation() string

+ type MetaData struct

+ Confidence Score

+ ID string

+ Severity Score

+ What string

+ type Metrics struct

+ NumFiles int

+ NumFound int

+ NumLines int

+ NumNosec int

+ type Rule interface

+ ID func() string

+ Match func(ast.Node, *Context) (*Issue, error)

+ type RuleBuilder func(id string, c Config) (Rule, []ast.Node)

+ type RuleSet map[reflect.Type][]Rule

+ func NewRuleSet() RuleSet

+ func (r RuleSet) Register(rule Rule, nodes ...ast.Node)

+ func (r RuleSet) RegisteredFor(n ast.Node) []Rule

+ type Score int

+ const High

+ const Low

+ const Medium

+ func (c Score) MarshalJSON() ([]byte, error)

+ func (c Score) String() string