alpTom/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2026-01-15 01:33:41 +08:00
Code Issues Packages Projects Releases Wiki Activity

Allow excluding analyzers globally (#1180)

Browse Source 
* This change does not exclude analyzers for inline comment
* Changed the expected issues count for G103, G109 samples for test. Previously G115 has been included in the issue count
* Show analyzers IDs(G115, G602) in gosec usage help
* See #1175
This commit is contained in:
Rahul Gadi
2024-08-20 04:43:40 -04:00
committed by GitHub
parent 18135b439c
commit 81cda2f91f
11 changed files with 301 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
cmd/gosec/main.go
View File

@@ -25,6 +25,7 @@ import (
"strings"
"github.com/securego/gosec/v2"
"github.com/securego/gosec/v2/analyzers"
"github.com/securego/gosec/v2/autofix"
"github.com/securego/gosec/v2/cmd/vflag"
"github.com/securego/gosec/v2/issue"
@@ -177,14 +178,23 @@ func usage() {
// sorted rule list for ease of reading
rl := rules.Generate(*flagTrackSuppressions)
keys := make([]string, 0, len(rl.Rules))
al := analyzers.Generate(*flagTrackSuppressions)
keys := make([]string, 0, len(rl.Rules)+len(al.Analyzers))
for key := range rl.Rules {
keys = append(keys, key)
}
for key := range al.Analyzers {
keys = append(keys, key)
}
sort.Strings(keys)
for _, k := range keys {
v := rl.Rules[k]
fmt.Fprintf(os.Stderr, "\t%s: %s\n", k, v.Description)
var description string
if rule, ok := rl.Rules[k]; ok {
description = rule.Description
} else if analyzer, ok := al.Analyzers[k]; ok {
description = analyzer.Description
}
fmt.Fprintf(os.Stderr, "\t%s: %s\n", k, description)
}
fmt.Fprint(os.Stderr, "\n")
}
@@ -245,6 +255,26 @@ func loadRules(include, exclude string) rules.RuleList {
return rules.Generate(*flagTrackSuppressions, filters...)
}
func loadAnalyzers(include, exclude string) *analyzers.AnalyzerList {
var filters []analyzers.AnalyzerFilter
if include != "" {
logger.Printf("Including analyzers: %s", include)
including := strings.Split(include, ",")
filters = append(filters, analyzers.NewAnalyzerFilter(false, including...))
} else {
logger.Println("Including analyzers: default")
}
if exclude != "" {
logger.Printf("Excluding analyzers: %s", exclude)
excluding := strings.Split(exclude, ",")
filters = append(filters, analyzers.NewAnalyzerFilter(true, excluding...))
} else {
logger.Println("Excluding analyzers: default")
}
return analyzers.Generate(*flagTrackSuppressions, filters...)
}
func getRootPaths(paths []string) []string {
rootPaths := make([]string, 0)
for _, path := range paths {
@@ -412,9 +442,12 @@ func main() {
logger.Fatal("No rules are configured")
}
analyzerList := loadAnalyzers(includeRules, excludeRules)
// Create the analyzer
analyzer := gosec.NewAnalyzer(config, *flagScanTests, *flagExcludeGenerated, *flagTrackSuppressions, *flagConcurrency, logger)
analyzer.LoadRules(ruleList.RulesInfo())
analyzer.LoadAnalyzers(analyzerList.AnalyzersInfo())
excludedDirs := gosec.ExcludedDirsRegExp(flagDirsExclude)
var packages []string