Minor fixes #1660
Annotations
10 errors and 1 warning
|
go-lint:
cmd/chall-manager/main.go#L92
string `etcd` has 3 occurrences, make it a constant (goconst)
|
|
go-lint:
pkg/fs/common.go#L5
G501: Blocklisted import crypto/md5: weak cryptographic primitive (gosec)
|
|
go-lint:
pkg/fs/common.go#L23
G401: Use of weak cryptographic primitive (gosec)
|
|
go-lint:
pkg/iac/stack.go#L56
G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
go-lint:
pkg/scenario/io.go#L53
G305: File traversal when extracting zip/tar archive (gosec)
|
|
go-lint:
pkg/scenario/io.go#L98
G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
go-lint:
api/v1/challenge/create.go#L5
G501: Blocklisted import crypto/md5: weak cryptographic primitive (gosec)
|
|
go-lint:
api/v1/challenge/create.go#L157
G401: Use of weak cryptographic primitive (gosec)
|
|
go-lint:
server/server.go#L146
G112: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
|
|
go-lint:
pkg/identity/identity.go#L21
var-naming: func parameter challId should be challID (revive)
|
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Loading