1.1 KiB
1.1 KiB
gosec
Inspect Go source code for security problems. Note:
./...is a Go package pattern understood by Go tooling. It matches the current package and all packages recursively under the current directory. More information: https://github.com/securego/gosec.
- Scan a Go package recursively in the current directory:
gosec ./...
- Scan a specific Go package:
gosec {{path/to/package}}
- Scan a Go package recursively and save results to a file:
gosec -fmt {{json|yaml|csv|html|sonarqube|golint|sarif|junit-xml}} -out {{path/to/report}} {{./...}}
- Only include a specific set of rules (by default, all rules will run):
gosec -include {{G101,G203,G401,...}} {{./...}}
- Exclude directories from scanning:
gosec -exclude-dir {{path/to/excluded_directory}} {{./...}}
- Scan with a specific severity or confidence level:
gosec -severity {{low|medium|high}} -confidence {{low|medium|high}} {{./...}}
- Exclude a specific set of rules from scanning:
gosec -exclude {{G101,G304,G401,...}} {{./...}}
- Scan test files as well:
gosec -tests {{./...}}