mirror of
https://github.com/willnorris/imageproxy.git
synced 2026-05-07 19:12:42 +02:00
.github/workflows: upgrade actions
This requires updating to a more recent version of golangci-lint, which has some new failures. This removes those failing linters, and I'll need to come back and look at those problems in a followup change.
This commit is contained in:
parent
c361000ff4
commit
b4c03c294c
5 changed files with 31 additions and 25 deletions
|
|
@ -1,25 +1,31 @@
|
|||
version: "2"
|
||||
linters:
|
||||
enable:
|
||||
- dogsled
|
||||
- dupl
|
||||
- errorlint
|
||||
- goimports
|
||||
- gosec
|
||||
- misspell
|
||||
- nakedret
|
||||
- stylecheck
|
||||
- unconvert
|
||||
- unparam
|
||||
- whitespace
|
||||
|
||||
issues:
|
||||
exclude-rules:
|
||||
# Some cache implementations use md5 hashes for cached filenames. There is
|
||||
# a slight risk of cache poisoning if an attacker could construct a URL
|
||||
# with the same hash, but the URL would also need to be allowed by the
|
||||
# proxy's security settings (host allowlist, URL signature, etc). Changing
|
||||
# these to a more secure hash algorithm would result in 100% cache misses
|
||||
# when users upgrade. For now, just leave these alone.
|
||||
- path: internal/.*cache
|
||||
linters: gosec
|
||||
text: G(401|501)
|
||||
# TODO: fix issues and reenable these checks
|
||||
disable:
|
||||
- errcheck
|
||||
- gosec
|
||||
- staticcheck
|
||||
|
||||
exclusions:
|
||||
rules:
|
||||
# Some cache implementations use md5 hashes for cached filenames. There is
|
||||
# a slight risk of cache poisoning if an attacker could construct a URL
|
||||
# with the same hash, but the URL would also need to be allowed by the
|
||||
# proxy's security settings (host allowlist, URL signature, etc). Changing
|
||||
# these to a more secure hash algorithm would result in 100% cache misses
|
||||
# when users upgrade. For now, just leave these alone.
|
||||
- path: internal/.*cache
|
||||
linters:
|
||||
- gosec
|
||||
text: G(401|501)
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue