code.staticcheckstaticcheck Go lints
Runs staticcheck over each Go module (go.mod). staticcheck type-checks packages through the Go toolchain, which may download missing modules but never compiles to binaries, runs go:generate or executes the target's code (cgo is disabled and toolchain downloads are blocked). SA checks are medium (likely bugs), S simplifications low, ST style info.
- Engine
- Wrapped scanner
- Wraps
staticcheck- Targets
- Codebase
- Areas
- Reliability, Maintainability
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.staticcheckWraps staticcheck. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.