x509-certificate-exporter/.golangci.yml at main · enix/x509-certificate-exporter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
version: "2"

linters:
  enable:
    - bodyclose
    - contextcheck
    - errcheck
    - errorlint
    - gocheckcompilerdirectives
    - gocritic
    - gosec
    - govet
    - ineffassign
    - misspell
    - nilerr
    - noctx
    - predeclared
    - staticcheck
    - unconvert
    - unused

  settings:
    gosec:
      # Rules that don't fit this project:
      #   G304 — opening user-provided paths IS the file-watcher's job
      #   G404 — math/rand is correct for backoff jitter (non-security)
      #   G115 — byte truncation in registry/labels.go is intentional bit packing
      excludes:
        - G304
        - G404
        - G115

  exclusions:
    rules:
      # gosec on tests + dev tooling (cluster seeders, fixture builders):
      # 0755 dirs, 0644 files, stub servers without ReadHeaderTimeout —
      # none of this affects production code.
      - path: (_test\.go|^dev/)
        linters:
          - gosec
          - noctx