boostsecurityio / lotp

boostsecurityio/lotp

Apache License 2.0

102 stars 6 forks source link

Add golangci-lint #10

Open fproulx-boostsecurity opened 9 months ago

fproulx-boostsecurity commented 9 months ago

Description of the LOTP tool

golangci-lint is meta-linter tool for Golang that has tons of plugins that can be configured we a config file.

Configuration files

.golangci.yml
.golangci.yaml
.golangci.toml
.golangci.json

Dangerous options

modules-download-mode: mod or modules-download-mode: vendor

They support so many linters that I cannot imagine there are not many LOTP in the linters themselves.

Documentation

https://golangci-lint.run/usage/configuration/

Real-world example

https://github.com/golangci/golangci-lint/blob/master/.golangci.yml

Additional notes

They have a popular GitHub Action https://github.com/golangci/golangci-lint-action