golang-ci lint:gosec G115 rule produces many false positive.
- Dominant language
- Go
- Stars
- 1.6k
- Forks
- 617
- Avg merge
- 5d 10h
- Merged PRs (30d)
- 43
Description
Hey @nixpanic, I tried to include the golangci-lint changes in this PR.
Now I see gosec lint errors - [ G115: integer overflow conversion ](https://github.com/ceph/ceph-csi/actions/runs/12433146449/job/34714039290?pr=5036), can we disable this rule for now and address later? Also, there seems to be an false positive reporting - https://github.com/securego/gosec/issues/1212
_Originally posted by @iPraveenParihar in https://github.com/ceph/ceph-csi/issues/5036#issuecomment-2557221068_
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the golangci-lint changes and the failing GitHub Actions job linked in the issue, then confirm how G115 is configured and whether the reported conversion matches the false positive described in gosec issue #1212. Done means the CI run no longer reports the unwanted G115 failures, while the later remediation remains explicit.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- ci-cd, tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100