From c182577d7add3f4ee29a172283e756b6bb9f8874 Mon Sep 17 00:00:00 2001 From: sapcc-bot Date: Thu, 6 Jun 2024 10:31:48 +0000 Subject: [PATCH] Run go-makefile-maker --- .golangci.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.golangci.yaml b/.golangci.yaml index d4c4a84f..713b11c7 100644 --- a/.golangci.yaml +++ b/.golangci.yaml @@ -35,6 +35,7 @@ linters-settings: # Report about not checking of errors in type assertions. check-type-assertions: true forbidigo: + analyze-types: true # required for pkg: forbid: # ioutil package has been deprecated: https://github.com/golang/go/issues/42026 - ^ioutil\..*$ @@ -42,6 +43,14 @@ linters-settings: # Applications wishing to use http.ServeMux should obtain local instances through http.NewServeMux() instead of using the global default instance. - ^http\.DefaultServeMux$ - ^http\.Handle(?:Func)?$ + # Forbid usage of old and archived square/go-jose + - pkg: ^gopkg\.in/square/go-jose\.v2$ + msg: "gopk.in/square/go-jose is arcived and has CVEs. Replace it with gopkg.in/go-jose/go-jose.v2" + - pkg: ^github.com/coreos/go-oidc$ + msg: "github.com/coreos/go-oidc depends on gopkg.in/square/go-jose which has CVEs. Replace it with github.com/coreos/go-oidc/v3" + + - pkg: ^github.com/howeyc/gopass$ + msg: "github.com/howeyc/gopass is archived, use golang.org/x/term instead" goconst: ignore-tests: true min-occurrences: 5