ingress-controller/.golangci.yml at main · pomerium/ingress-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
version: "2"
run:
  build-tags:
    - embed_pomerium
linters:
  default: none
  enable:
    - bodyclose
    - dogsled
    - errcheck
    - goprintffuncname
    - gosec
    - govet
    - ineffassign
    - lll
    - misspell
    - nakedret
    - nolintlint
    - revive
    - staticcheck
    - unconvert
    - unused
    - whitespace
  settings:
    dupl:
      threshold: 100
    funlen:
      lines: 100
      statements: 50
    goconst:
      min-len: 2
      min-occurrences: 2
    gocritic:
      disabled-checks:
        - dupImport
        - ifElseChain
        - octalLiteral
        - whyNoLint
        - wrapperFunc
      enabled-tags:
        - diagnostic
        - experimental
        - opinionated
        - performance
        - style
    gocyclo:
      min-complexity: 15
    lll:
      line-length: 160
    misspell:
      locale: US
    nolintlint:
      require-explanation: false
      require-specific: false
      allow-unused: false
  exclusions:
    generated: lax
    rules:
      - linters:
          - gocritic
        text: "unnecessaryDefer:"
      - linters:
          - bodyclose
          - errcheck
          - gosec
          - lll
          - maligned
          - mnd
          - scopelint
          - staticcheck
          - unparam
          - unused
        path: _test\.go$|^tests/|^integration/|^samples/|templates\.go$|^internal/stress/
      - linters:
          - lll
        source: '^//go:generate |// \+kubebuilder:'
      - linters:
          - gosec
        path: internal/identity/google.go
        text: Potential hardcoded credentials
      - linters:
          - staticcheck
        path: internal/identity/google.go
        text: please use NewService instead
      - linters:
          - gosec
        path: internal/identity/oauth/github/github.go
        text: Potential hardcoded credentials
      - linters:
          - golint
          - revive
        text: should have a package comment
      - linters:
          - revive
        text: avoid meaningless package names
      - path: (.+)\.go$
        text: Error return value of .((os\.)?std(out|err)\..*|.*Close|.*Flush|os\.Remove(All)?|.*printf?|os\.(Un)?Setenv). is not checked
      - path: (.+)\.go$
        text: func name will be used as test\.Test.* by other packages, and that stutters; consider calling this
      - path: (.+)\.go$
        text: (possible misuse of unsafe.Pointer|should have signature)
      - path: (.+)\.go$
        text: ineffective break statement. Did you mean to break out of the outer loop
      - path: (.+)\.go$
        text: Use of unsafe calls should be audited
      - path: (.+)\.go$
        text: Subprocess launch(ed with variable|ing should be audited)
      - path: (.+)\.go$
        text: G104
      - path: (.+)\.go$
        text: G117
      - path: (.+)\.go$
        text: (Expect directory permissions to be 0750 or less|Expect file permissions to be 0600 or less)
      - path: (.+)\.go$
        text: Potential file inclusion via variable
      - path: (.+)\.go$
        text: Error return value of `w.Write` is not checked
      - path: (.+)\.go$
        text: Error return value of `io.WriteString` is not checked
      - path: (.+)\.go$
        text: Error return value of `viper.BindEnv` is not checked
      - path: (.+)\.go$
        text: Error return value of `h.Write` is not checked
      - path: (.+)\.go$
        text: ExecuteTemplate` is not checked
      - path: (.+)\.go$
        text: TLS InsecureSkipVerify set true.
      - path: (.+)\.go$
        text: goroutine calls T.Fatalf, which must be called in the same goroutine as the test
      - path: (.+)\.go$
        text: method XXX
      - path: (.+)\.go$
        text: SA1019
      - path: (.+)\.go$
        text: Error return value of .((os\.)?std(out|err)\..*|.*Close|.*Flush|os\.Remove(All)?|.*print(f|ln)?|os\.(Un)?Setenv). is not checked
      - linters:
          - staticcheck
        path: (.+)\.go$
        text: QF1008
    paths:
      - third_party$
      - builtin$
      - examples$
formatters:
  enable:
    - gofmt
    - goimports
  settings:
    goimports:
      local-prefixes:
        - github.com/pomerium
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$