oittaa 35a92b49d5 feat(sql): enhance SQL injection detection with improved string concatenation checks (#1454) ...

* feat(sql): enhance SQL injection detection with improved string concatenation checks

* optimize: only one ast.Inspect loop, use slices.ContainsFunc

* refactor(sql): streamline SQL argument retrieval, replace constObject with TryResolve, minor cleanup

* feat(sql): enhance query mutation checks for shadowed variables and add regression tests

* remove deprecated ast.Object

2026-01-06 14:30:54 +01:00

..

archive.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

bind.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

blocklist.go

Added more rules

2024-06-25 13:18:27 +02:00

decompression_bomb.go

Do not allow dashes in file names

2025-06-16 14:34:38 +02:00

directory_traversal.go

Do not allow dashes in file names

2025-06-16 14:34:38 +02:00

errors.go

whitelist crypto/rand Read from error checks (#1446)

2025-12-31 18:57:36 +02:00

fileperms_test.go

fileperms: bitwise permission comparison (#883)

2022-10-20 08:48:40 +02:00

fileperms.go

Fix typos in comments and fields

2024-11-30 10:37:42 +01:00

hardcoded_credentials.go

feat(rules): add support for detecting high entropy strings in composite literals (#1447)

2026-01-02 09:58:08 +02:00

http_serve.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

implicit_aliasing.go

Replace old golang.org links with new go.dev (#1271)

2024-12-16 15:18:51 +01:00

integer_overflow.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

pprof.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

rand.go

Add support for math/rand/v2 added in Go 1.22

2024-03-07 16:33:18 +01:00

readfile.go

feat(G304): add os.Root remediation hint (Autofix) when Go >= 1.24

2025-09-16 14:37:06 +00:00

rsa.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

rulelist.go

feat: add secrets serialization G117 (#1451)

2026-01-04 17:21:22 +02:00

rules_suite_test.go

Update to ginkgo v2 (#753)

2022-01-03 18:11:35 +01:00

rules_test.go

feat: add secrets serialization G117 (#1451)

2026-01-04 17:21:22 +02:00

secret_serialization.go

feat: add secrets serialization G117 (#1451)

2026-01-04 17:21:22 +02:00

slowloris.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

sql.go

feat(sql): enhance SQL injection detection with improved string concatenation checks (#1454)

2026-01-06 14:30:54 +01:00

ssh.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

ssrf.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

subproc.go

feat(rules): enhance subprocess variable checks (#1453)

2026-01-06 14:20:23 +01:00

tempfiles.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

templates.go

Add more types to templates rule

2024-05-28 10:39:33 +02:00

tls_config.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

tls.go

Extract the issue in its own package

2023-02-16 09:45:28 +01:00

trojansource.go

feature: add rule for trojan source (#1431)

2025-12-11 10:14:29 +01:00

unsafe.go

Update the list of unsafe functions detected by the unsafe rule (#1033)

2023-10-10 09:47:36 +02:00

weakcrypto.go

Minor changes

2024-06-24 15:25:54 +02:00

weakcryptohash.go

Minor changes

2024-06-24 15:25:54 +02:00

weakdepricatedcryptohash.go

Added more rules

2024-06-25 13:18:27 +02:00