ilyabrin / disk

78%

release: 78%

LAST BUILD ON BRANCH fix/security-alerts

branch: fix/security-alerts

CHANGE BRANCH

x

Reset

• fix/security-alerts
• additions-in-types
• alert-autofix-1
• alert-autofix-2
• chore/gitattributes
• ci/lint-v2
• ci/main-branch
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/setup-go-4
• dependabot/github_actions/actions/setup-go-5
• dependabot/github_actions/coverallsapp/github-action-1.2.0
• dependabot/github_actions/coverallsapp/github-action-1.2.4
• dependabot/github_actions/coverallsapp/github-action-2.0.0
• dependabot/github_actions/coverallsapp/github-action-2.1.0
• dependabot/github_actions/coverallsapp/github-action-2.1.2
• dependabot/github_actions/coverallsapp/github-action-2.2.0
• dependabot/github_actions/coverallsapp/github-action-2.2.1
• dependabot/github_actions/coverallsapp/github-action-2.2.3
• dependabot/github_actions/coverallsapp/github-action-2.3.0
• dependabot/github_actions/coverallsapp/github-action-2.3.3
• dependabot/github_actions/dot-github/workflows/actions/checkout-5
• dependabot/github_actions/dot-github/workflows/actions/checkout-6
• dependabot/github_actions/dot-github/workflows/actions/checkout-7
• dependabot/github_actions/dot-github/workflows/actions/dependency-review-action-5
• dependabot/github_actions/dot-github/workflows/actions/setup-go-6
• dependabot/github_actions/dot-github/workflows/actions/setup-go-7
• dependabot/github_actions/dot-github/workflows/coverallsapp/github-action-2.3.6
• dependabot/github_actions/dot-github/workflows/coverallsapp/github-action-2.3.7
• dependabot/github_actions/dot-github/workflows/coverallsapp/github-action-2.3.8
• dependabot/github_actions/dot-github/workflows/github/codeql-action-4
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.22.10
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.22.11
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.22.7
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.22.8
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.22.9
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.23.0
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.27.1
• dependabot/github_actions/dot-github/workflows/securego/gosec-2.28.0
• dependabot/github_actions/github-actions-38f1f72cae
• dependabot/github_actions/github-actions-541e0c332b
• dependabot/github_actions/github/codeql-action-3
• dependabot/github_actions/jandelgado/gcov2lcov-action-1.1.0
• dependabot/github_actions/jandelgado/gcov2lcov-action-1.1.1
• dependabot/go_modules/github.com/stretchr/testify-1.10.0
• dependabot/go_modules/github.com/stretchr/testify-1.11.0
• dependabot/go_modules/github.com/stretchr/testify-1.11.1
• dependabot/go_modules/github.com/stretchr/testify-1.9.0
• dependabot/go_modules/go-dependencies-37ff05d3c1
• dependabot/go_modules/gopkg.in/dnaeon/go-vcr.v3-3.2.0
• disk-rc1
• docs/api-comments
• docs/changelog
• docs/community
• docs/friendly
• feat/api-coverage
• feat/public-settings
• feature/comprehensive-improvements
• fix/api-params
• fix/delete-status
• fix/int64-sizes
• fix/log-request
• fix/transfer-timeouts
• fix/trash-listing
• lil-fix-readme
• main
• new-version
• refs/tags/v1.0.1
• release
• security-checks
• tests
• tests-1
• tmp-push-probe
• update-readme
• v1.1.0
• v1.1.1
• v1.2.0
• v1.2.1
• v1.2.2
• v1.2.3
• v1.3.0
• v1.4.0
• v1.5.0

Build # 37609581549

Build Type

Pull #87

github

Committed by ilyabrin

Commit Message

fix: resolve the open gosec findings

Five of the six were log-injection reports in examples/pagination. That
code is illustrative rather than part of the library, and SECURITY.md
already puts examples/ out of scope, so gosec now skips the directory to
match the stated policy.

The sixth was an unchecked resp.Body.Close() on the retry path, where the
body is being thrown away before the next attempt and a close error
changes nothing. It is now discarded explicitly.

gosec v2.28.0, run locally with the arguments CI uses, reported these six
before the change and none after.

Pull Request Pull Request #87: fix: resolve the open gosec findings

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

1919 of 2454 relevant lines covered (78.2%)

19.42 hits per line