fix(forbidigo): add more rules to avoid skipping TLS verifications BE-11973 (#1123)

pull/12512/merge
andres-portainer 2025-09-01 16:57:22 -03:00 committed by GitHub
parent def19be230
commit 48dcfcb08f
1 changed files with 2 additions and 0 deletions

View File

@ -50,6 +50,8 @@ linters:
msg: Do not set this field directly, use crypto.CreateTLSConfiguration() instead msg: Do not set this field directly, use crypto.CreateTLSConfiguration() instead
- pattern: ^object\.(Commit|Tag)\.Verify$ - pattern: ^object\.(Commit|Tag)\.Verify$
msg: "Not allowed because of FIPS mode" msg: "Not allowed because of FIPS mode"
- pattern: ^(types\.SystemContext\.)?(DockerDaemonInsecureSkipTLSVerify|DockerInsecureSkipTLSVerify|OCIInsecureSkipTLSVerify)$
msg: "Not allowed because of FIPS mode"
analyze-types: true analyze-types: true
exclusions: exclusions:
generated: lax generated: lax