oadmin/sub2api
1
0
Fork 0
Code Issues Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #571 from wucm667/chore/configure-gosec-exclusions

Browse Source 
chore: 配置 gosec 排除规则
This commit is contained in:
Wesley Liddick
2026-02-13 20:05:02 +08:00
committed by GitHub
parent c7b42148a5 5f4eb9f9d0
commit 8e2c22d0bd
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/security-scan.yml vendored
View File

@@ -32,7 +32,7 @@ jobs:
working-directory: backend
run: |
go install github.com/securego/gosec/v2/cmd/gosec@latest
gosec -severity high -confidence high ./...
gosec -conf .gosec.yaml -severity high -confidence high ./...
frontend-security:
runs-on: ubuntu-latest

7
backend/.gosec.yaml Normal file
View File

@@ -0,0 +1,7 @@
global:
# Exclude G704 (SSRF via taint analysis) - this is an API gateway platform
# that by design proxies requests to configurable upstream services.
# All upstream URLs are sourced from admin-configured settings or known
# third-party API endpoints, not from end-user input.
exclude:
- G704