ilyabrin / disk / 37609581549

78%

release: 78%

Pull #87

github

fix: resolve the open gosec findings

Five of the six were log-injection reports in examples/pagination. That
code is illustrative rather than part of the library, and SECURITY.md
already puts examples/ out of scope, so gosec now skips the directory to
match the stated policy.

The sixth was an unchecked resp.Body.Close() on the retry path, where the
body is being thrown away before the next attempt and a close error
changes nothing. It is now discarded explicitly.

gosec v2.28.0, run locally with the arguments CI uses, reported these six
before the change and none after.

1 of 1 new or added line in 1 file covered. (100.0%)

1919 of 2454 relevant lines covered (78.2%)

19.42 hits per line