-
Notifications
You must be signed in to change notification settings - Fork 5.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(tools): Bump golangci-lint from v1.53.2 to v1.54.2 #13838
Conversation
Download PR build artifacts for linux_amd64.tar.gz, darwin_amd64.tar.gz, and windows_amd64.zip. 📦 Click here to get additional PR build artifactsArtifact URLs |
@srebhan
I believe that most of them are false-positives. This PR introduced code which found these issues: securego/gosec#966 and fix was made here securego/gosec#1003 I believe that mentioned fix hasn't been yet released (it is not contained in latest v2.17.0. |
@zak-pawel I'm not so sure about those being false positives. Most of them take the address of an iterator and pass it on to other functions. While this works in those cases it is fragile because as soon as you store that pointer in any of the sub-routines you get into trouble. As we do not modify the value in the pointer in almost all cases I pass the data (mostly strings) by value rather than passing the pointer... |
I can agree with your explanation :) |
We need to bump the linter in order to be compatible with go 1.21 (see nightly build error for Windows). This PR bumps the linter and fixes the newly found issues.