vulners-cli/.golangci.yml at main · kidoz/vulners-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
version: "2"

linters:
  default: none
  enable:
    # Essential
    - errcheck
    - govet
    - staticcheck
    - unused
    - ineffassign
    # Error handling
    - errname
    # Style & modernization
    - revive
    - misspell
    # Security
    - gosec
    # Complexity
    - gocyclo
    - funlen
    # Testing
    - thelper
    - tparallel

  settings:
    gocyclo:
      min-complexity: 15
    funlen:
      lines: 80
      statements: 50
    revive:
      rules:
        - name: package-comments
          disabled: true
        - name: exported
          disabled: true
    gosec:
      excludes:
        - G304 # file inclusion via variable — expected for CLI tool

  exclusions:
    paths:
      - vendor
      - testdata
    rules:
      # G703 (path traversal via taint analysis) is a newer gosec rule not in
      # golangci-lint's config-verify enum, so it cannot live under
      # gosec.excludes. Suppress it here for test fixtures that write files
      # into t.TempDir() paths.
      - path: _test\.go
        linters:
          - gosec
        text: "G703"

formatters:
  enable:
    - goimports
    - gofumpt
  exclusions:
    paths:
      - vendor
      - testdata