.github/workflows: upgrade actions

This requires updating to a more recent version of golangci-lint, which
has some new failures.  This removes those failing linters, and I'll
need to come back and look at those problems in a followup change.
This commit is contained in:
Will Norris 2025-04-17 21:22:18 -07:00
parent c361000ff4
commit b4c03c294c
5 changed files with 31 additions and 25 deletions

View file

@ -1,25 +1,31 @@
version: "2"
linters:
enable:
- dogsled
- dupl
- errorlint
- goimports
- gosec
- misspell
- nakedret
- stylecheck
- unconvert
- unparam
- whitespace
issues:
exclude-rules:
# Some cache implementations use md5 hashes for cached filenames. There is
# a slight risk of cache poisoning if an attacker could construct a URL
# with the same hash, but the URL would also need to be allowed by the
# proxy's security settings (host allowlist, URL signature, etc). Changing
# these to a more secure hash algorithm would result in 100% cache misses
# when users upgrade. For now, just leave these alone.
- path: internal/.*cache
linters: gosec
text: G(401|501)
# TODO: fix issues and reenable these checks
disable:
- errcheck
- gosec
- staticcheck
exclusions:
rules:
# Some cache implementations use md5 hashes for cached filenames. There is
# a slight risk of cache poisoning if an attacker could construct a URL
# with the same hash, but the URL would also need to be allowed by the
# proxy's security settings (host allowlist, URL signature, etc). Changing
# these to a more secure hash algorithm would result in 100% cache misses
# when users upgrade. For now, just leave these alone.
- path: internal/.*cache
linters:
- gosec
text: G(401|501)