osv-scanner/.golangci.yaml at main · google/osv-scanner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
version: "2"

linters:
  default: all
  # prettier-ignore
  disable:
    - cyclop           #
    - err113           # will re-add later (another-rex)
    - exhaustruct      # overkill (g-rath)
    - forcetypeassert  # too hard (g-rath)
    - funlen           #
    - funcorder        #
    - gochecknoglobals # disagree with, for non changing variables (another-rex)
    - gocognit         #
    - goconst          # not everything should be a constant
    - gocyclo          #
    - godot            # comments are fine without full stops (g-rath)
    - godox            # to-do comments are fine (g-rath)
    - ireturn          # disagree with, sort of (g-rath)
    - lll              # line length is hard (g-rath)
    - maintidx         #
    - mnd              # not every number is magic (g-rath)
    - nestif           #
    - noinlineerr      #
    - nonamedreturns   # disagree with, for now (another-rex)
    - tagliatelle      # we're parsing data from external sources (g-rath)
    - testpackage      # will re-add later (another-rex)
    - varnamelen       # maybe later (g-rath)
    - wrapcheck        # too difficult, will re-add later (another-rex)
    - wsl              # disagree with, for now (g-rath)
    - wsl_v5           # disagree with, for now (g-rath)
  settings:
    depguard:
      rules:
        regexp:
          files:
            - "!**/internal/cachedregexp/**"
            - "!**/internal/testutility/normalize.go"
            - "!**/pkg/osvscanner/exclude.go"
          deny:
            - pkg: regexp
              desc: Use github.com/google/osv-scanner/v2/internal/cachedregexp instead
    exhaustive:
      default-signifies-exhaustive: true
    forbidigo:
      forbid:
        - pattern: ^testing.T.Skip
          pkg: ^testing$
          msg: go-snaps needs to know the test has been skipped, so use `testutility.Skip` instead
        - pattern: ^os.Getwd
          pkg: ^os$
          msg: use `testutility.GetCurrentWorkingDirectory`
      analyze-types: true
    gocritic:
      disabled-checks:
        - ifElseChain
    govet:
      enable-all: true
      disable:
        - fieldalignment
        - shadow
    nlreturn:
      block-size: 2
    revive:
      rules:
        - name: increment-decrement
          disabled: true
        - name: blank-imports
          disabled: false
        - name: context-as-argument
          disabled: false
        - name: context-keys-type
          disabled: false
        - name: dot-imports
          disabled: false
        - name: empty-block
          disabled: false
        - name: error-naming
          disabled: false
        - name: error-return
          disabled: false
        - name: error-strings
          disabled: false
        - name: errorf
          disabled: false
        - name: exported
          disabled: false
          arguments:
            # TODO: get these all enabled
            - "check-private-receivers"
            # - "check-public-interface"
            - "disable-checks-on-constants"
            - "disable-checks-on-functions"
            - "disable-checks-on-methods"
            - "disable-checks-on-types"
            - "disable-checks-on-variables"
        - name: import-alias-naming
          disabled: false
        - name: import-shadowing
          disabled: false
        - name: indent-error-flow
          disabled: false
        - name: package-comments
          disabled: false
        - name: range
          disabled: false
        - name: receiver-naming
          disabled: false
        - name: redefines-builtin-id
          disabled: false
        - name: redundant-test-main-exit
          disabled: false
        - name: superfluous-else
          disabled: false
        - name: time-naming
          disabled: false
        - name: unexported-return
          disabled: false
        - name: unreachable-code
          disabled: false
        - name: unused-parameter
          disabled: false
        - name: use-any
          disabled: false
        - name: var-declaration
          disabled: false
        - name: var-naming
          disabled: false
          arguments:
            - [] # AllowList
            - [] # DenyList
            - - skip-package-name-checks: true
  exclusions:
    generated: lax
    presets:
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      - path: _test\.go
        linters:
          - dupl
      - path-except: _test\.go
        text: use `testutility.GetCurrentWorkingDirectory`
    paths:
      - internal/thirdparty/
      - third_party$
      - builtin$
      - examples$

formatters:
  enable:
    - gofmt
    - goimports
  exclusions:
    generated: lax
    paths:
      - internal/thirdparty/
      - third_party$
      - builtin$
      - examples$

issues:
  max-issues-per-linter: 0
  max-same-issues: 0