File tree 3 files changed +11
-4
lines changed
instrumentation/opencensus
3 files changed +11
-4
lines changed Original file line number Diff line number Diff line change @@ -7,7 +7,10 @@ import (
7
7
"fmt"
8
8
"os"
9
9
10
- "github.com/hypertrace/goagent/instrumentation/hypertrace/github.com/jackc/hyperpgx"
10
+ // gosec complains about this pkg not following golang repo standards
11
+ // "could not import github.com/hypertrace/goagent/instrumentation/hypertrace/github.com/jackc/hyperpgx (invalid package name: "")"
12
+ // It is caused the pkg having its own go.mod
13
+ "github.com/hypertrace/goagent/instrumentation/hypertrace/github.com/jackc/hyperpgx" // #nosec
11
14
)
12
15
13
16
func main () {
Original file line number Diff line number Diff line change @@ -10,7 +10,9 @@ import (
10
10
"net/http"
11
11
"time"
12
12
13
- "github.com/go-sql-driver/mysql"
13
+ // gosec complains about github.com/go-sql-driver/mysql not following golang repo standards
14
+ // "could not import github.com/go-sql-driver/mysql (invalid package name: "")"
15
+ "github.com/go-sql-driver/mysql" // #nosec
14
16
"github.com/gorilla/mux"
15
17
"github.com/hypertrace/goagent/config"
16
18
"github.com/hypertrace/goagent/instrumentation/hypertrace"
Original file line number Diff line number Diff line change @@ -21,8 +21,10 @@ func Init(cfg *config.AgentConfig) func() {
21
21
22
22
client := & http.Client {Transport : & http.Transport {
23
23
TLSClientConfig : & tls.Config {
24
- MinVersion : tls .VersionTLS12 ,
25
- InsecureSkipVerify : ! cfg .GetReporting ().GetSecure ().GetValue (), // #nosec
24
+ MinVersion : tls .VersionTLS12 ,
25
+ // Ignore gosec: G402 (CWE-295): TLS InsecureSkipVerify may be true.
26
+ // #nosec G402
27
+ InsecureSkipVerify : ! cfg .GetReporting ().GetSecure ().GetValue (),
26
28
},
27
29
}}
28
30
You can’t perform that action at this time.
0 commit comments