-
-
Notifications
You must be signed in to change notification settings - Fork 670
Comparing changes
Open a pull request
base repository: securego/gosec
base: v2.22.8
head repository: securego/gosec
compare: v2.22.9
- 14 commits
- 16 files changed
- 4 contributors
Commits on Aug 14, 2025
-
Update gosec version to v2.22.8 in the Github action
Change-Id: Ifc3c472f6c6aa08bda00ab57298fd7d383ab8325 Signed-off-by: Cosmin Cojocar <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for cee0aea - Browse repository at this point
Copy the full SHA cee0aeaView commit details
Commits on Aug 18, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 287b46c - Browse repository at this point
Copy the full SHA 287b46cView commit details
Commits on Aug 25, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 5af1117 - Browse repository at this point
Copy the full SHA 5af1117View commit details
Commits on Sep 8, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 4be6b11 - Browse repository at this point
Copy the full SHA 4be6b11View commit details
Commits on Sep 12, 2025
-
rules(G202): detect SQL concat in ValueSpec declarations; add test sa…
…mple\n\n- Handle var query string = 'SELECT ...' + user style declarations\n- Reuse existing binary expr detection on ValueSpec.Values\n- Add postgres sample mirroring issue #1309 report\n- Rules tests: 42 passed
Configuration menu - View commit details
-
Copy full SHA for 40ac530 - Browse repository at this point
Copy the full SHA 40ac530View commit details -
rules(G304): analyze only path arg; ignore flag/perm vars; track Clea…
…n and safe Join; fix nil-context panic\n\n- Limit G304 checks to first arg (path) for os.Open/OpenFile/ReadFile, avoiding false positives when flag/perm are variables\n- Track filepath.Clean so cleaned identifiers are treated as safe\n- Consider safe joins: filepath.Join(const|resolvedBase, Clean(var)|cleanedIdent)\n- Record Join(...) assigned to identifiers and allow if later cleaned\n- Fix panic by passing non-nil context in trackJoinAssignStmt\n- All rules tests: 42 passed
Configuration menu - View commit details
-
Copy full SHA for 79f835d - Browse repository at this point
Copy the full SHA 79f835dView commit details -
test(g304): add samples for var perm and var flag with cleaned path\n…
…\n- Ensure G304 does not fire when only non-path args (flag/perm) are variables\n- Both samples use filepath.Clean on the path arg\n- Rules suite remains green (42 passed)
Configuration menu - View commit details
-
Copy full SHA for e6218c8 - Browse repository at this point
Copy the full SHA e6218c8View commit details -
Configuration menu - View commit details
-
Copy full SHA for ab078db - Browse repository at this point
Copy the full SHA ab078dbView commit details -
Configuration menu - View commit details
-
Copy full SHA for e81fba3 - Browse repository at this point
Copy the full SHA e81fba3View commit details
Commits on Sep 15, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 3ead143 - Browse repository at this point
Copy the full SHA 3ead143View commit details
Commits on Sep 16, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 506407e - Browse repository at this point
Copy the full SHA 506407eView commit details
Commits on Sep 22, 2025
-
feat(autofix): update gemini sdk and add anthropic claude
* upgrade gemini sdk to google.golang.org/genai v1.25.0 * support newer gemini models * add anthropic claude
Configuration menu - View commit details
-
Copy full SHA for 64ebfc0 - Browse repository at this point
Copy the full SHA 64ebfc0View commit details -
Configuration menu - View commit details
-
Copy full SHA for 7b8713e - Browse repository at this point
Copy the full SHA 7b8713eView commit details -
Update cosign to v2.6.0 and go in the CI to latest version
Change-Id: I1754871a875f82fa1177793e74a41cc88ef4059f Signed-off-by: Cosmin Cojocar <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 15d5c61 - Browse repository at this point
Copy the full SHA 15d5c61View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v2.22.8...v2.22.9