gosec: add G602 analyzer (#4906)

golangci · Aug 14, 2024 · ca0b09e · ca0b09e
1 parent 15529a9
commit ca0b09e
Show file tree

Hide file tree

Showing 5 changed files with 3 additions and 8 deletions.
diff --git a/.golangci.next.reference.yml b/.golangci.next.reference.yml
@@ -874,7 +874,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # To specify a set of rules to explicitly exclude.
     # Available rules: https://github.com/securego/gosec#available-rules
@@ -914,7 +913,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # Exclude generated files
     # Default: false

diff --git a/.golangci.reference.yml b/.golangci.reference.yml
@@ -874,7 +874,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # To specify a set of rules to explicitly exclude.
     # Available rules: https://github.com/securego/gosec#available-rules
@@ -914,7 +913,6 @@ linters-settings:
       - G504 # Import blocklist: net/http/cgi
       - G505 # Import blocklist: crypto/sha1
       - G601 # Implicit memory aliasing of items from a range statement
-      - G602 # Slice access out of bounds
 
     # Exclude generated files
     # Default: false

diff --git a/jsonschema/golangci.jsonschema.json b/jsonschema/golangci.jsonschema.json
@@ -157,8 +157,7 @@
         "G503",
         "G504",
         "G505",
-        "G601",
-        "G602"
+        "G601"
       ]
     },
     "govet-analyzers": {

diff --git a/jsonschema/golangci.next.jsonschema.json b/jsonschema/golangci.next.jsonschema.json
@@ -157,8 +157,7 @@
         "G503",
         "G504",
         "G505",
-        "G601",
-        "G602"
+        "G601"
       ]
     },
     "govet-analyzers": {

diff --git a/pkg/golinters/gosec/gosec.go b/pkg/golinters/gosec/gosec.go
@@ -77,6 +77,7 @@ func runGoSec(lintCtx *linter.Context, pass *analysis.Pass, settings *config.GoS
 	}
 
 	analyzer.CheckRules(pkg)
+	analyzer.CheckAnalyzers(pkg)
 
 	secIssues, _, _ := analyzer.Report()
 	if len(secIssues) == 0 {