gosec
gosec copied to clipboard
Generic blocklist rule
Summary
Some imports are currently blocked-listed by hard-coding them in various blockedlist rules. https://github.com/securego/gosec/blob/36a82ea85e59163446547798563e24ee8d5a27c7/rules/blacklist.go#L50
https://github.com/securego/gosec/blob/36a82ea85e59163446547798563e24ee8d5a27c7/rules/rulelist.go#L90
I think that it would be nice to define a generic blocklist rule which is able to parse the blocklisted import paths from the rule config.