Ben Krieger

Results 41 comments of Ben Krieger

My understanding of SSA is pretty limited, but I think we need to be looking at all the SSA basic blocks within the function. Like this: ```diff diff --git a/analyzers/conversion_overflow.go...

Unfortunately with the latest changes, I've seen two regressions running gosec on my private codebase. First, is a case of: ```go xbLen := len(xb) if xbLen > math.MaxUint16 { return...

> @czechbol I am currently getting a panic on the following input: > > ```go > package main > > import "math" > > func foo(x []string) int16 { >...

> > I am currently getting a panic on the following input > > @rittneje Yes, I know there's panics, that's why I said I "have some way" of handling...

> Thanks! I'm marking this as ready for review then. Let's wait a bit for @ben-krieger and @rittneje for their opinions and let's merge it. I'm on a short trip...

Sorry for being slow on the review. I'm now getting 5 new hits on my codebase since I ran this PR a few days ago. Based on a quick glance,...

> Sorry for being slow on the review. I'm now getting 5 new hits on my codebase since I ran this PR a few days ago. > > Based on...

> Does somebody work on fixing these vulnerabilities ? Everyone who worked on the CI release and test process has stopped working on this project and I haven't been able...

> Hi @ben-krieger @KiranSukhavasi > We have taken a look at the CI pipeline and we might get it back up (@wenyang-cao is working on it and it looks promising...

Proposed solution: - [ ] Update docs to note requirement for using podman with DNS enabled in network config - [ ] Update `docker-compose.yml` to make kong port configurable -...