agent/.golangci.yaml at develop · portainer/agent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
version: "2"

run:
  allow-parallel-runners: true
linters:
  default: none
  enable:
    - bodyclose
    - copyloopvar
    - depguard
    - errcheck
    - errorlint
    - forbidigo
    - govet
    - ineffassign
    - intrange
    - perfsprint
    - staticcheck
    - unused
    - mirror
    - durationcheck
    - errorlint
    - govet
    - unconvert
    - usetesting
    - zerologlint
    - testifylint
    - modernize
    - unconvert
    - unused
    - zerologlint
    - exptostd
  settings:
    staticcheck:
      checks: ["all", "-SA1019", "-ST1003", "-ST1005", "-ST1016", "-QF1002", "-QF1003", "-QF1008"]
    depguard:
      rules:
        main:
          files:
            - '!**/*_test.go'
          deny:
            - pkg: golang.org/x/exp
              desc: exp is not allowed
            - pkg: github.com/portainer/libcrypto
              desc: use github.com/portainer/portainer/pkg/libcrypto
            - pkg: github.com/portainer/libhttp
              desc: use github.com/portainer/portainer/pkg/libhttp
            - pkg: golang.org/x/crypto
              desc: golang.org/x/crypto is not allowed because of FIPS mode
            - pkg: github.com/ProtonMail/go-crypto/openpgp
              desc: github.com/ProtonMail/go-crypto/openpgp is not allowed because of FIPS mode
            - pkg: gopkg.in/yaml.v2
              desc: use go.yaml.in/yaml/v3 instead
            - pkg: gopkg.in/yaml.v3
              desc: use go.yaml.in/yaml/v3 instead
            - pkg: github.com/golang-jwt/jwt/v4
              desc: use github.com/golang-jwt/jwt/v5 instead
            - pkg: github.com/mitchellh/mapstructure
              desc: use github.com/go-viper/mapstructure/v2 instead
            - pkg: gopkg.in/alecthomas/kingpin.v2
              desc: use github.com/alecthomas/kingpin/v2 instead
            - pkg: github.com/jcmturner/gokrb5$
              desc: use github.com/jcmturner/gokrb5/v8 instead
            - pkg: github.com/gofrs/uuid
              desc: use github.com/google/uuid
            - pkg: github.com/Masterminds/semver$
              desc: use github.com/Masterminds/semver/v3
            - pkg: github.com/blang/semver
              desc: use github.com/Masterminds/semver/v3
            - pkg: github.com/coreos/go-semver
              desc: use github.com/Masterminds/semver/v3
            - pkg: github.com/hashicorp/go-version
              desc: use github.com/Masterminds/semver/v3
    forbidigo:
      forbid:
        - pattern: ^tls\.Config$
          msg: Use crypto.CreateTLSConfiguration() instead
        - pattern: ^tls\.Config\.(InsecureSkipVerify|MinVersion|MaxVersion|CipherSuites|CurvePreferences)$
          msg: Do not set this field directly, use crypto.CreateTLSConfiguration() instead
        - pattern: ^object\.(Commit|Tag)\.Verify$
          msg: "Not allowed because of FIPS mode"
        - pattern: ^(types\.SystemContext\.)?(DockerDaemonInsecureSkipTLSVerify|DockerInsecureSkipTLSVerify|OCIInsecureSkipTLSVerify)$
          msg: "Not allowed because of FIPS mode"
        - pattern: ^(chclient\.TLSConfig\.)?SkipVerify$
          msg: "Not allowed because of FIPS mode"
      analyze-types: true
  exclusions:
    generated: lax
    presets:
      - comments
      - common-false-positives
      - legacy
    paths:
      - third_party$
      - builtin$
      - examples$
formatters:
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$