Security Testing

feat: cherry-pick upstream provider improvements #56

Sign in to view logs

Triggered via pull request February 27, 2026 15:26

BorisTyshkevich

synchronize #4

feature/cherry-pick-upstream-improvements

Status Failure

Total duration 3m 50s

Artifacts –

security.yml

on: pull_request

Perform SAST analysis (golangci-lint)

Perform SCA analysis (govulncheck)

Workflow Summary

Annotations

10 errors

Perform SAST analysis (golangci-lint): pkg/instanceutil/metadata_service.go#L63

G704: SSRF via taint analysis (gosec)

Perform SAST analysis (golangci-lint): pkg/functions/cloud_functions.go#L201

G704: SSRF via taint analysis (gosec)

Perform SAST analysis (golangci-lint): pkg/debezium/bench/main.go#L19

G703: Path traversal via taint analysis (gosec)

Perform SAST analysis (golangci-lint): pkg/credentials/static_creds.go#L10

G117: Exported struct field "AuthToken" (JSON key "AuthToken") matches secret pattern (gosec)

Perform SAST analysis (golangci-lint): pkg/connection/mongo/connection.go#L36

G117: Exported struct field "Password" (JSON key "Password") matches secret pattern (gosec)

Perform SAST analysis (golangci-lint): internal/logger/kafka_push_client.go#L23

G117: Exported struct field "Password" (JSON key "Password") matches secret pattern (gosec)

Perform SAST analysis (golangci-lint): cmd/trcli/main.go#L73

G114: Use of net/http serve function that has no support for setting timeouts (gosec)

Perform SAST analysis (golangci-lint): internal/logger/batching_logger/spam_aggregator.go#L12

Comment should end in a period (godot)

Perform SAST analysis (golangci-lint): internal/logger/batching_logger/batching_logger.go#L29

Comment should end in a period (godot)

Perform SAST analysis (golangci-lint): internal/logger/batching_logger/batching_logger.go#L23

Comment should end in a period (godot)