You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Suppressions: (see https://github.com/securego/gosec#available-rules for details)
50
+
- G101# "Look for hardcoded credentials" -> a lot of false positives in descriptions for resources like mariadb/credential
51
+
- G104# "Audit errors not checked" -> which we don't need and is a badly implemented version of errcheck
52
+
- G102# "Bind to all interfaces" -> since this is normal in k8s
53
+
- G304# "File path provided as taint input" -> too many false positives
54
+
- G307# "Deferring unsafe method "Close" on type "io.ReadCloser" -> false positive when calling defer resp.Body.Close()
55
+
misspell:
56
+
# Correct spellings using locale preferences for US or UK.
57
+
# Default is to use a neutral variety of English.
58
+
# Setting locale to US will correct the British spelling of 'colour' to 'color'.
59
+
locale: US
60
+
nakedret:
61
+
max-func-lines: 0
62
+
revive:
63
+
severity: error
64
+
# https://github.com/mgechev/revive
65
+
rules:
66
+
- name: errorf
67
+
- name: context-as-argument
68
+
- name: error-return
69
+
- name: increment-decrement
70
+
- name: indent-error-flow
71
+
- name: superfluous-else
72
+
- name: unused-parameter
73
+
- name: unreachable-code
74
+
- name: atomic
75
+
- name: empty-lines
76
+
- name: early-return
77
+
staticcheck:
78
+
checks:
79
+
# default from https://golangci-lint.run/docs/linters/configuration/#staticcheck
80
+
- all
81
+
- "-ST1000"
82
+
- "-ST1003"
83
+
- "-ST1016"
84
+
- "-ST1020"
85
+
- "-ST1021"
86
+
- "-ST1022"
87
+
# customizations
88
+
- "-SA1019"# disable deprecation errors while we switch over to the SDK structure with multi API version support
89
+
- "-QF1001"# disable 'could apply De Morgan's law': readability of boolean expressions is subjective and should be decided on a case-by-case basis
90
+
- "-QF1012"# disable 'use fmt.Fprintf instead' Fprintf returns bytes written and an error, which we'd have to handle/ignore to appease some other linter
0 commit comments