Skip to content

Releases: securego/gosec

v2.22.5

16 Jun 09:55
Compare
Choose a tag to compare

Changelog

  • d2d3ae6 Switch back go.mod to minimum 1.23.0
  • 1e7ed06 Update dependencies
  • 1bef91a Update go version 1.24.4 and 1.23.10 in CI
  • 621702f chore(deps): update all dependencies
  • 017d1d6 G201/G202: add checks for injection into sql.Conn methods
  • 67f63d4 chore(deps): update module google.golang.org/api to v0.235.0
  • b4eabb1 chore(deps): update module google.golang.org/api to v0.234.0
  • 52a80ff chore(deps): update module google.golang.org/api to v0.233.0
  • e2a9506 chore(deps): update module google.golang.org/api to v0.232.0

v2.22.4

08 May 09:25
Compare
Choose a tag to compare

Changelog

  • 6decf96 Update to go version 1.24.3 and 1.23.9
  • d522338 update: updated the build command to include version metadata
  • 270b5ce chore(deps): update all dependencies
  • 6027926 Update the AI provider API key value when provided as an argument
  • 65d2d9f chore(deps): update module google.golang.org/api to v0.230.0
  • dc1c38b chore(deps): update module google.golang.org/api to v0.229.0
  • 55dbf5a chore(deps): update all dependencies
  • 2aaa9c4 Comment the reason why the file can be nil when an issue is created
  • 700e9a9 Handle nil file when creating a new issue
  • d514c42 chore(deps): update all dependencies (#1333)
  • 1d458c5 Update version in 'action.yml' to 2.22.3 (anticipating next version (#1332)

v2.22.3

04 Apr 08:01
955a68d
Compare
Choose a tag to compare

Changelog

v2.22.2

05 Mar 10:45
136f6c0
Compare
Choose a tag to compare

Changelog

  • 136f6c0 Update to go version 1.24.1 and 1.23.7 (#1313)
  • 047453a chore(deps): update all dependencies (#1310)
  • 76ccee5 chore(deps): update all dependencies (#1308)
  • a9eb1c9 Update gosec version in the GitHub action to v2.22.1 (#1307)
  • 89c5da3 chore(deps): update module google.golang.org/api to v0.221.0 (#1305)

v2.22.1

13 Feb 09:27
43fee88
Compare
Choose a tag to compare

Changelog

  • 43fee88 Update cosign to v2.4.2 (#1303)
  • 7723829 Add support for go 1.24 and phased out support for go 1.22 (#1302)
  • 9552f03 chore(deps): update all dependencies (#1300)
  • f4d2576 Update to go version 1.23.6 and 1.22.12 (#1299)
  • 2258e31 chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
  • fbb0833 chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
  • c66cb56 Add test to conver unit parssing for G115 rule (#1293)
  • 59291a0 Update to go version 1.23.5 and 1.22.11 (#1291)
  • 7466b7c chore(deps): update all dependencies (#1290)
  • 32dcc8a Update gosec in github action to 2.22.0 (#1286)

v2.22.0

09 Jan 12:06
e0cca6f
Compare
Choose a tag to compare

Changelog

  • e0cca6f Update what message for G104 (#1282)
  • 534689b chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  • eb95db1 chore(deps): update all dependencies (#1280)
  • 6c6da40 chore(deps): update all dependencies (#1279)
  • b12f51f Simplify sortIssues implementation (#1277)
  • 54c2185 Enable testifylint and fix up lint issues (#1276)
  • 36c81ed Refactor AppendError to check for build.NoGoError (#1273)
  • 9a2d74f chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  • 4c5ad91 Update README.md (#1274)
  • e21b4d4 Rule documentation updates (#1272)
  • 92de0ee Replace old golang.org links with new go.dev (#1271)
  • 4fda076 Refactor AppendError to use strings.Contains (#1270)
  • b01f49e Simplify Analyzer.ignore by reducing nesting (#1269)
  • b62cc33 Improve capitalization in AI API flags descriptions (#1267)
  • bc77d16 Remove unused golint dependency (#1266)
  • ef1a35f Simplify tests by using GinkgoT().TempDir() (#1265)
  • 09b9143 Documentation on adding new rules and analyzers (#1262)
  • 1bd92a8 chore(deps): update all dependencies (#1268)
  • ca55eca Update to go 1.22.10 and 1.23.4 versions (#1264)
  • 329cad8 chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  • 08beb25 chore(deps): update all dependencies (#1261)
  • d566be2 chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  • 8c602d0 fix: revive.redefines-builtin-id lint warnings (#1257)
  • 399e835 Fix typos in comments and fields
  • 229cf63 Remove the decryption funtions/methods from G407 check
  • 699cb55 Upate go to version 1.23.3 and 1.22.9
  • 9b13cd5 Fix G115 false positive when going from parsed uint to larger int
  • 08ea2a5 chore(deps): update all dependencies
  • 4415613 chore(deps): update all dependencies
  • 3274716 chore(deps): update all dependencies
  • 1fb6a46 chore(deps): update all dependencies
  • d2c92ed chore(deps): update all dependencies
  • 4fd9872 Update go version to 1.23.2 and 1.22.8
  • 1501618 chore(deps): update module google.golang.org/api to v0.201.0
  • 7d33bc1 chore(deps): update all dependencies
  • bd8b4b4 chore(deps): update all dependencies
  • 1216c9b Fix the cosign step to authenticate with the container registry
  • 50d1b4a chore(deps): update module google.golang.org/api to v0.199.0
  • c0ba7c7 Update the gosec to v2.21.4 in the Github action
  • a3299ce Add the version into goreleaser config

v2.21.4

26 Sep 11:58
d4617f5
Compare
Choose a tag to compare

Changelog

  • d4617f5 chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
  • 1d23143 Prevent panic: unexpected constant value: (#1232)
  • 6741874 Fix running single analyzer which isn't a rule bug (#1231)
  • a836898 Update gosec version to v2.21.3 in github action (#1227)

v2.21.3

18 Sep 11:49
be8bd6e
Compare
Choose a tag to compare

Changelog

v2.21.2

09 Sep 13:43
abfe8cf
Compare
Choose a tag to compare

Changelog

v2.21.1

04 Sep 15:01
0ce4453
Compare
Choose a tag to compare

Changelog

  • 0ce4453 Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210)
  • ea26e84 Update gosec in github action to v2.21.0 (#1208)