Comments (1)
Thanks for reporting. It actually looks as though the damage is done by filepath.Abs(path) here
fmt.Printf("BEFORE: path = %s\n", path)
path, err := filepath.Abs(path)
fmt.Printf("AFTER: path = %s\n", path)
Produced this output for me:
BEFORE: path = C:\Users\User\gocode\src\...
AFTER: path = C:\Users\User\gocode\src\
from gosec.
Related Issues (20)
- Add detection of overflow during integer conversion HOT 1
- Regarding customizing a configuration file to load G101 rules, where keywords with "-" cannot be matched HOT 1
- Documentation on how to use sig files for release binaries HOT 1
- 'go install' doesn't work HOT 2
- Gosec Configuration file to integrate with GitHub ( as a workflow file) HOT 2
- Add an option to set the Go version HOT 4
- criteria for adding new secret patterns versus relying on high entropy detection HOT 1
- Setting the Gosec Confidence level to Medium. HOT 1
- New release for the github action of gosec to include #1153 HOT 1
- possible regression on first g104 sample HOT 1
- Rule G401 covers multiple different CWEs.
- Create a taint analysis engine HOT 2
- Add rules for deprecated hashing algorithms
- Go version issues when running in CI (Github Actions) HOT 4
- can we get a patch release out to support go 1.22 fixes? HOT 2
- Gosec does not detect G204 if user input is from a function parameter
- CheckAnalyzers doesn't seem to respect exclude or nosec (e.g. G602) HOT 2
- GoSec pulling the image before docker hub login HOT 1
- G115: integer overflow conversion uint8 -> int64 HOT 21
- G115 ignores bounds checks HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gosec.