hyperscale-stack / security / 26216508074

92%

push

github

fix(session): annotate G124 on configurable cookie attributes

gosec G124 cannot prove the Secure/HttpOnly/SameSite attributes are safe
because they are populated from the Manager configuration. The defaults
are secure (Secure, HttpOnly, SameSiteLax); the framework intentionally
lets callers tune them. Mark both http.Cookie literals with a justified
nolint directive.

1 of 1 new or added line in 1 file covered. (100.0%)

3733 of 4084 relevant lines covered (91.41%)

11.99 hits per line