Errors unhandled. (CWE-703)

[cbilgin23]

Due Date: 2022-10-27

A low severity vulnerability has been discovered in your project.

Project Name: twrap-go

Scanner Name: gosec

Cwe ID: 703

Cwe Name: Improper Check or Handling of Exceptional Conditions

Cwe Link: https://cwe.mitre.org/data/definitions/703.html

File: pkg/scanner/sast_gitleaks.go

Line: 120

Code:

-115 -  if !g.Params.Manual && g.Params.Project.Actions.Repo.Path == "" {
-116 -      return errors.New("missing repository information")
-117 -  }
-118 - 
-119 -  h := sha256.New()
*120 -  h.Write([]byte(strconv.FormatInt(time.Now().UnixNano(), 10)))
-121 -  hash := fmt.Sprintf("%x", h.Sum(nil))
-122 -  if hash == "" {
-123 -      return errors.New("failed to create hash for directory path")
-124 -  }
-125 -  g.SetScanValue(hash)
-126 - 

Language: go

Commit Author: sbalka

Commit Link: (https://github.com/endpointlabs/twrap-go/commit/d2195af0805974ef14338e3ab3cfe5a7b5d46541)

Tool Description: Errors unhandled.

Custom Description: test

Kondukto Link: http://79.kondukto.local/projects/634fe837a5be8478724352c4/vulns/appsec?page=1&perPage=15&id=in:6358dcdeb8bfc0fbb2c3b8fc Deeplink: https://cwe.mitre.org/data/definitions/703.html