Note that gosec IMHO is a bit silly here, the heuristics used are note very good, i.e. the code is already validating the external inputs and it's not clear to me that "filepath.Clean()" will help but it seems to supress the error. I hope gosec provides value in other places, here it seems to be adding work :/ I also excluded "gosec" from any _test.go files, I do not see why we should gosec tests? |
||
|---|---|---|
| .. | ||
| build_result.go | ||
| config.go | ||
| export_test.go | ||
| handler_build.go | ||
| handler_build_test.go | ||
| handler_result.go | ||
| handler_result_test.go | ||
| handler_root.go | ||
| handler_root_test.go | ||
| main.go | ||
| main_test.go | ||
| routes.go | ||