38 lines
1.1 KiB
Markdown
38 lines
1.1 KiB
Markdown
|
# gosec
|
||
|
|
|
||
|
|
> Inspect Go source code for security problems.
|
||
|
|
> Note: `./...` is a Go package pattern understood by Go tooling. It matches the current package and all packages recursively under the current directory.
|
||
|
|
> More information: <https://github.com/securego/gosec>.
|
||
|
|
|
||
|
|
- Scan a Go package recursively in the current directory:
|
||
|
|
|
||
|
|
`gosec ./...`
|
||
|
|
|
||
|
|
- Scan a specific Go package:
|
||
|
|
|
||
|
|
`gosec {{path/to/package}}`
|
||
|
|
|
||
|
|
- Scan a Go package recursively and save results to a file:
|
||
|
|
|
||
|
|
`gosec -fmt {{json|yaml|csv|html|sonarqube|golint|sarif|junit-xml}} -out {{path/to/report}} {{./...}}`
|
||
|
|
|
||
|
|
- Only include a specific set of rules (by default, all rules will run):
|
||
|
|
|
||
|
|
`gosec -include {{G101,G203,G401,...}} {{./...}}`
|
||
|
|
|
||
|
|
- Exclude directories from scanning:
|
||
|
|
|
||
|
|
`gosec -exclude-dir {{path/to/excluded_directory}} {{./...}}`
|
||
|
|
|
||
|
|
- Scan with a specific severity or confidence level:
|
||
|
|
|
||
|
|
`gosec -severity {{low|medium|high}} -confidence {{low|medium|high}} {{./...}}`
|
||
|
|
|
||
|
|
- Exclude a specific set of rules from scanning:
|
||
|
|
|
||
|
|
`gosec -exclude {{G101,G304,G401,...}} {{./...}}`
|
||
|
|
|
||
|
|
- Scan test files as well:
|
||
|
|
|
||
|
|
`gosec -tests {{./...}}`
|