Merge pull request #31 from Conjur-Enterprise/fix-gosec

CNJR-5372: Fix 'nosec' comments

Author: szh

CONTRIBUTING.md

@@ -209,6 +209,17 @@ To run linting checks via the Code Climate golint engine, simply run:
 ./bin/check_style
 ```
 
+### gosec
+
+We use [gosec](https://github.com/securego/gosec) to perform static analysis of
+our codebase in our CI for all changed code. To run gosec locally for the entire
+repository, simply run:
+
+```sh-session
+go install github.com/securego/gosec/v2/cmd/gosec@latest
+$(go env GOPATH)/bin/gosec ./...
+```
+
 ### Testing Individual Connectors
 
 For instructions on how to test individual connectors, see the README.md file in

bin/juxtaposer/tester/db/db.go

@@ -77,13 +77,12 @@ func (manager *DriverManager) ensureWantedDbDataState() error {
 		insertItemStatement := QueryTypes["insertItem"] +
 			fmt.Sprintf("(%s)", manager.Tester.GetQueryMarkers(5))
 
-		/* #nosec */
 		err = manager.Tester.Query(insertItemStatement,
 			fmt.Sprintf("%s%d", NameFieldPrefix, itemIndex),
 			itemIndex,
 			time.Now().AddDate(0, 0, itemIndex),
 			float32(itemIndex)*10,
-			rand.Int31()&0x1,
+			rand.Int31()&0x1, // #nosec
 		)
 
 		if err != nil {