kiji-proxy/.golangci.yml at main · dataiku/kiji-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
version: "2"

run:
  timeout: 5m

linters:
  default: none
  enable:
    - errcheck
    - govet
    - ineffassign
    - staticcheck
    - unused
    - misspell
    - gocyclo
    - goconst
    - dupl
    - gocritic
    - gosec
    - nakedret
    - rowserrcheck
    - unconvert
    - unparam
    - whitespace

  settings:
    gosec:
      excludes:
        - G101 # False positive on config field names matching "secret" patterns
        - G115 # Safe integer conversions (e.g., rune('A' + smallInt))
        - G117 # False positive on struct fields matching secret patterns
        - G703 # Path traversal — expected in proxy serving CA certs
        - G704 # SSRF — expected in proxy forwarding requests
        - G705 # XSS — expected in proxy forwarding response bodies
        - G706 # Log injection — expected in proxy logging request paths

  exclusions:
    presets:
      - comments
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      - path: _test\.go
        linters:
          - mnd
          - funlen
          - gocyclo
          - goconst
          - dupl
          - gosec