akanealw
eec8c28fb3
Some checks are pending
Go Benchmark / Performance Regression Check (push) Waiting to run
Cerberus Integration / Cerberus Security Stack Integration (push) Waiting to run
Upload Coverage to Codecov / Backend Codecov Upload (push) Waiting to run
Upload Coverage to Codecov / Frontend Codecov Upload (push) Waiting to run
CodeQL - Analyze / CodeQL analysis (go) (push) Waiting to run
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Waiting to run
CrowdSec Integration / CrowdSec Bouncer Integration (push) Waiting to run
Docker Build, Publish & Test / build-and-push (push) Waiting to run
Docker Build, Publish & Test / Security Scan PR Image (push) Blocked by required conditions
Quality Checks / Auth Route Protection Contract (push) Waiting to run
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Waiting to run
Quality Checks / Backend (Go) (push) Waiting to run
Quality Checks / Frontend (React) (push) Waiting to run
Rate Limit integration / Rate Limiting Integration (push) Waiting to run
Security Scan (PR) / Trivy Binary Scan (push) Waiting to run
Supply Chain Verification (PR) / Verify Supply Chain (push) Waiting to run
WAF integration / Coraza WAF Integration (push) Waiting to run
130 lines
6.8 KiB
Plaintext
Executable File
130 lines
6.8 KiB
Plaintext
Executable File
internal/api/handlers/notification_coverage_test.go:22:16: Error return value of `db.AutoMigrate` is not checked (errcheck)
|
|
db.AutoMigrate(&models.Notification{}, &models.NotificationProvider{}, &models.NotificationTemplate{})
|
|
^
|
|
internal/api/handlers/pr_coverage_test.go:404:16: Error return value of `db.AutoMigrate` is not checked (errcheck)
|
|
db.AutoMigrate(&models.SecurityAudit{}, &models.DNSProvider{})
|
|
^
|
|
internal/api/handlers/pr_coverage_test.go:438:16: Error return value of `db.AutoMigrate` is not checked (errcheck)
|
|
db.AutoMigrate(&models.SecurityAudit{}, &models.DNSProvider{})
|
|
^
|
|
internal/api/handlers/settings_handler_test.go:895:16: Error return value of `json.Unmarshal` is not checked (errcheck)
|
|
json.Unmarshal(w.Body.Bytes(), &resp)
|
|
^
|
|
internal/api/handlers/settings_handler_test.go:923:16: Error return value of `json.Unmarshal` is not checked (errcheck)
|
|
json.Unmarshal(w.Body.Bytes(), &resp)
|
|
^
|
|
internal/api/handlers/settings_handler_test.go:1081:16: Error return value of `json.Unmarshal` is not checked (errcheck)
|
|
json.Unmarshal(w.Body.Bytes(), &resp)
|
|
^
|
|
internal/caddy/manager_additional_test.go:1467:11: Error return value of `w.Write` is not checked (errcheck)
|
|
w.Write([]byte(`{"apps":{"http":{}}}`))
|
|
^
|
|
internal/caddy/manager_additional_test.go:1522:11: Error return value of `w.Write` is not checked (errcheck)
|
|
w.Write([]byte("{" + "\"apps\":{\"http\":{}}}"))
|
|
^
|
|
internal/caddy/manager_test.go:133:11: Error return value of `w.Write` is not checked (errcheck)
|
|
w.Write([]byte(`{"apps": {"http": {}}}`))
|
|
^
|
|
internal/config/config_test.go:56:11: Error return value of `os.Setenv` is not checked (errcheck)
|
|
os.Setenv("CHARON_DB_PATH", charonDB)
|
|
^
|
|
internal/config/config_test.go:57:11: Error return value of `os.Setenv` is not checked (errcheck)
|
|
os.Setenv("CPM_DB_PATH", cpmDB)
|
|
^
|
|
internal/config/config_test.go:72:11: Error return value of `os.Setenv` is not checked (errcheck)
|
|
os.Setenv("CPM_CADDY_CONFIG_DIR", filePath)
|
|
^
|
|
internal/config/config_test.go:157:14: Error return value of `os.Unsetenv` is not checked (errcheck)
|
|
os.Unsetenv("CHARON_DB_PATH")
|
|
^
|
|
internal/config/config_test.go:158:14: Error return value of `os.Unsetenv` is not checked (errcheck)
|
|
os.Unsetenv("CHARON_CADDY_CONFIG_DIR")
|
|
^
|
|
internal/config/config_test.go:159:14: Error return value of `os.Unsetenv` is not checked (errcheck)
|
|
os.Unsetenv("CHARON_IMPORT_DIR")
|
|
^
|
|
internal/database/errors_test.go:230:13: Error return value of `sqlDB.Close` is not checked (errcheck)
|
|
sqlDB.Close()
|
|
^
|
|
internal/services/dns_provider_service_test.go:1446:13: Error return value of `sqlDB.Close` is not checked (errcheck)
|
|
sqlDB.Close()
|
|
^
|
|
internal/services/dns_provider_service_test.go:1466:13: Error return value of `sqlDB.Close` is not checked (errcheck)
|
|
sqlDB.Close()
|
|
^
|
|
cmd/seed/seed_smoke_test.go:21:12: G301: Expect directory permissions to be 0750 or less (gosec)
|
|
if err := os.MkdirAll("data", 0o755); err != nil {
|
|
^
|
|
internal/api/handlers/manual_challenge_handler.go:649:15: G115: integer overflow conversion int -> uint (gosec)
|
|
return uint(v)
|
|
^
|
|
internal/api/handlers/manual_challenge_handler.go:651:15: G115: integer overflow conversion int64 -> uint (gosec)
|
|
return uint(v)
|
|
^
|
|
internal/api/handlers/security_handler_rules_decisions_test.go:162:92: G115: integer overflow conversion uint -> int (gosec)
|
|
req = httptest.NewRequest(http.MethodDelete, "/api/v1/security/rulesets/"+strconv.Itoa(int(rs.ID)), http.NoBody)
|
|
^
|
|
internal/caddy/config.go:463:16: G602: slice index out of range (gosec)
|
|
host := hosts[i]
|
|
^
|
|
internal/config/config.go:68:12: G301: Expect directory permissions to be 0750 or less (gosec)
|
|
if err := os.MkdirAll(filepath.Dir(cfg.DatabasePath), 0o755); err != nil {
|
|
^
|
|
internal/config/config.go:72:12: G301: Expect directory permissions to be 0750 or less (gosec)
|
|
if err := os.MkdirAll(cfg.CaddyConfigDir, 0o755); err != nil {
|
|
^
|
|
internal/config/config_test.go:67:12: G304: Potential file inclusion via variable (gosec)
|
|
f, err := os.Create(filePath)
|
|
^
|
|
internal/config/config_test.go:148:12: G304: Potential file inclusion via variable (gosec)
|
|
f, err := os.Create(blockingFile)
|
|
^
|
|
internal/crowdsec/hub_cache.go:82:12: G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
if err := os.WriteFile(archivePath, archive, 0o640); err != nil {
|
|
^
|
|
internal/crowdsec/hub_cache.go:86:12: G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
if err := os.WriteFile(previewPath, []byte(preview), 0o640); err != nil {
|
|
^
|
|
internal/crowdsec/hub_cache.go:105:12: G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
if err := os.WriteFile(metaPath, raw, 0o640); err != nil {
|
|
^
|
|
internal/crowdsec/hub_cache.go:127:15: G304: Potential file inclusion via variable (gosec)
|
|
data, err := os.ReadFile(metaPath)
|
|
^
|
|
internal/crowdsec/hub_sync.go:1016:16: G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
if _, err := io.Copy(f, tr); err != nil {
|
|
^
|
|
internal/database/database_test.go:181:12: G302: Expect file permissions to be 0600 or less (gosec)
|
|
f, err := os.OpenFile(dbPath, os.O_RDWR, 0o644)
|
|
^
|
|
internal/database/errors_test.go:187:12: G302: Expect file permissions to be 0600 or less (gosec)
|
|
f, err := os.OpenFile(dbPath, os.O_RDWR, 0o644)
|
|
^
|
|
internal/services/backup_service.go:316:12: G305: File traversal when extracting zip/tar archive (gosec)
|
|
fpath := filepath.Join(dest, f.Name)
|
|
^
|
|
internal/services/backup_service.go:345:12: G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
_, err = io.Copy(outFile, rc)
|
|
^
|
|
internal/services/backup_service_test.go:469:6: G302: Expect file permissions to be 0600 or less (gosec)
|
|
_ = os.Chmod(service.BackupDir, 0o444)
|
|
^
|
|
internal/services/uptime_service_test.go:58:13: G112: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
|
|
server := &http.Server{
|
|
Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusOK)
|
|
}),
|
|
}
|
|
internal/services/uptime_service_test.go:831:14: G112: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
|
|
server := &http.Server{
|
|
Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusNotFound)
|
|
}),
|
|
}
|
|
internal/util/crypto_test.go:63:2: G101: Potential hardcoded credentials (gosec)
|
|
secret := "a]3kL9#mP2$vN7@qR5*wX1&yT4^uI8%oE0!"
|
|
^
|
|
40 issues:
|
|
* errcheck: 18
|
|
* gosec: 22
|