Linter: gosec, Rule: G405 - Detect the usage of DES or RC4. Should we enable it?

[zak-pawel]

Use Case

This issue starts discussion about enabling:

• linter: gosec - Inspects source code for security problems by scanning the Go AST.
• rule: G405 - Detect the usage of DES or RC4

Rule G401: Detect the usage of DES, RC4, MD5 or SHA1 has been split into two different rules (G401: Detect the usage of MD5 or SHA1 and G405: Detect the usage of DES or RC4).
Rule is mapped to CWE-327: Use of a Broken or Risky Cryptographic Algorithm.

Expected behavior

Decision if rule should be enabled or not.

Actual behavior

For this rule no findings were found in current code.

Additional info

For this rule no additional configuration can be provided.

[zak-pawel]

I would enable it.