Skip to content

v2.4.0

Compare
Choose a tag to compare
@github-actions github-actions released this 24 Jul 07:55
· 515 commits to master since this release

Changelog

6bcd89a Mark all lines of a multi-line finding
4d4e594 Add some comments
d1467ac Extend the code snippet included in the issue and refactored how the code snippet is printed
37d1af0 Expand the arguments to a list of strings when they are provided as a single string
59cbe00 Update all dependencies
ade81d3 Rename file for consistency
03f12f3 Change naming rule from blacklist to blocklist
3784ffe Fix panic when reading the version from debug info in Go 1.13
55d368f Improve the TLS version checking
ad1cb7e Make sure some version information is set when no version was injected into the binary
1d2c951 Extend the rule G304 with os.OpenFile and add a test to cover it
0c1a71b Add more tests samples to increase coverage
fe07fcf Fix unit test when checking a mix of good and bad random functions
6bbf8f9 Extend the insecure random rule with more insecure random functions
af699f6 Exclude .git directory from scan (#485)
6202b38 Update all dependencies (#484)
6a130d5 Update the link pointing to issues to CWE mapping to use the master version (#483)
826db1c Fix the build tags propagation
7da9248 Change the issue test to verify that a multi-line finding contains a line range
7aedcc5 Remove print line from tests
30e93bf Improve the SQL strings concat rules to handle multiple string concatenation
68bce94 Improve the SQL concatenation and string formatting rules to be applied only in the database/sql context
32be4a5 Make sure all rules are mapped to CWE numbers
8630c43 Add null pointer check in G601
1418b85 ondisk -> onDisk
b2cfc5d USERS.md type in the title fixed.
425b8f9 Display a sponsor button in the repository
0714a1e Update the users file with some more projects and companies
1b915dd Set up a gosec's users list
668512f Update bad_defer.go