include static analysis tool options for Go

[afeld]

...because @jcscottiii finally found one! We should first make sure that it actually works and is effective, before adding it to the list.

https://github.com/HewlettPackard/gas

[NoahKunin]

I saw that - I know we're approaching formalization on this, so CCing @dlapiduz and @cnelson so we're all on the same page (whether it's a Go app on cloud.gov or in/part of cloud.gov)

[cnelson]

I think after today's conversation, we should probably just list Go under the existing Code Climate section, as Code Climate now ships golint and govet engines.

[NoahKunin]

@cnelson works for me! A cursory review just now indicates that's probably the best we'll get for now re: Go, but that Code Climate still isn't matching Brakeman/Hakiri/Gemnasium for Ruby on Rails (which is weird).

[afeld]

golint and govet

I think those are purely style, rather than having anything related to security. I could be wrong!

[jcscottiii]

if we want a swiss army knife and more, there's gometalinter (it includes Gas too)

[afeld]

Discussions about adding golang support to

• Dep
• Gemnasium