gokart icon indicating copy to clipboard operation
gokart copied to clipboard

A static analysis tool for securing Go code

Results 37 gokart issues
Sort by recently updated
recently updated
newest added

According to https://pkg.go.dev/golang.org/x/tools/go/analysis#Analyzer: ```go type Analyzer struct { // ... // Run applies the analyzer to a package. // It returns an error if the analyzer failed. // // On...

This change declares each of the analyzers in the analyzers package to have a result type of `[]github.com/praetorian-inc/gokart/util.Finding`. A test has also been included that runs a minimal `*analysis.Pass` through...

If you run ```gokart scan``` on go 1.18 projects, you get an error: ```internal error: package "time" without types was imported from "github.com/Omaze/cl-sweeps-api/internal/common"``` We need to have a 1.18 build...

FYI, I have [filed a PR](https://github.com/Homebrew/homebrew-core/pull/102000) to include homebrew support for this project.

When I scan a repo using Go 1.18 generics, gokart panics with the message: `zeroConst: unexpected T`. For reference, the only function in the repo using generics is as follows:...

bug
enhancement

How does one scan all directories recursively?

After reading the readme doc, I'm wondering that how to config a custom taint tracking or data flow analysis. For example, I hope to config some "source pattern" and "sink...

configPath recieved from flag, Am i doing something wrong? ```go clean := filepath.Clean(configPath) file, err := os.Open(clean) ```