code.golangci-lintgolangci-lint
Runs golangci-lint with the project's own .golangci config over each Go module. NOT safe on untrusted code: the config can load Go plugins (.so files and module plugins) that run inside the linter, which is why it is opt-in. Like the other Go wrappers it disables cgo and toolchain downloads and never builds or runs the target. gosec findings are security, bug-class linters (govet, errcheck, staticcheck, ...) reliability, the rest maintainability.
- Engine
- Wrapped scanner
- Wraps
golangci-lint- Targets
- Codebase
- Areas
- Reliability, Maintainability, Security
- Runs
- Opt-in: only when selected with --only
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.golangci-lintWraps golangci-lint. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.