ceph / ceph/ceph-csi

golang-ci lint:gosec G115 rule produces many false positive.

Open
#5,040 1 comment 0 reactions 0 assignees View on GitHub
cleanup component/testing keepalive
Dominant language
Go
Stars
1.6k
Forks
617
Avg merge
5d 10h
Merged PRs (30d)
43

Description

Hey @nixpanic, I tried to include the golangci-lint changes in this PR.
Now I see gosec lint errors - [ G115: integer overflow conversion ](https://github.com/ceph/ceph-csi/actions/runs/12433146449/job/34714039290?pr=5036), can we disable this rule for now and address later? Also, there seems to be an false positive reporting - https://github.com/securego/gosec/issues/1212

_Originally posted by @iPraveenParihar in https://github.com/ceph/ceph-csi/issues/5036#issuecomment-2557221068_

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the golangci-lint changes and the failing GitHub Actions job linked in the issue, then confirm how G115 is configured and whether the reported conversion matches the false positive described in gosec issue #1212. Done means the CI run no longer reports the unwanted G115 failures, while the later remediation remains explicit.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
ci-cd, tooling
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.