Skip to content

Conversation

@ian-oneleet
Copy link

This adds a new flag, -exclude-analyzers, which excludes all Analyzer-based rules.

Alongside #1419, this makes it convenient to run a slightly slimmed-down, substantially faster version of Gosec. It's not very difficult to exclude these rules yourself, except:

  • you have read the source code to know which rules to exclude
  • for users who don't want to run SSA analysis, any Analyzer-based rules added in future updates to Gosec could lead to significant, unexpected performance regressions, if those users fail to add the new rules to the -exclude list

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant