c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
40 lines
982 B
YAML
40 lines
982 B
YAML
version: "2"
|
|
|
|
linters:
|
|
enable:
|
|
- gosec
|
|
- govet
|
|
- errcheck
|
|
- ineffassign
|
|
- staticcheck
|
|
- unused
|
|
- forbidigo
|
|
disable:
|
|
- bodyclose # too many false negatives
|
|
|
|
settings:
|
|
gosec:
|
|
excludes:
|
|
- G101
|
|
- G117
|
|
- G306
|
|
- G704
|
|
- G705
|
|
forbidigo:
|
|
forbid:
|
|
- pattern: "http\\.DefaultClient"
|
|
msg: "Use reg.HTTPClient(ctx) or httpx.NewResilientClient() — http.DefaultClient bypasses SSRF protection and retry logic."
|
|
- pattern: "retryablehttp\\.NewClient\\b"
|
|
msg: "Use httpx.NewResilientClient() — retryablehttp.NewClient() bypasses SSRF protection and registry configuration."
|
|
exclusions:
|
|
rules:
|
|
- linters:
|
|
- staticcheck
|
|
text: "SA1019" # we do use deprecated APIs on purpose sometimes
|
|
- linters:
|
|
- forbidigo
|
|
path: "pkg/(httpclient|client-go)/"
|
|
- linters:
|
|
- forbidigo
|
|
path: "_test\\.go$"
|