Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Enable gosec and fix findings #83

Merged
merged 2 commits into from
Oct 7, 2024
Merged

chore: Enable gosec and fix findings #83

merged 2 commits into from
Oct 7, 2024

Conversation

vitsalis
Copy link
Member

@vitsalis vitsalis commented Oct 4, 2024

This update involves:

  • Enabling gosec in the github workflow and updating the github workflow versions.
  • Update the codebase to fix findings from gosec. Highlights:
    • Some unhandled errors
    • Config types allowed for very large values. For example, the retry intervals and the commit gaps allowed for uint64. All values related to block sizes were left to uint64, but the others were reduced to uint32.
    • Prometheus server protection against Slowloris

This update involves:
- Enabling gosec in the github workflow and updating
  the github workflow versions.
- Update the codebase to fix findings from gosec. Highlights:
   - Some unhandled errors
   - Config types allowed for very large values. For example,
     the retry intervals and the commit gaps allowed for uint64.
     All values related to block sizes were left to uint64, but
     the others were reduced to uint32.
   - Prometheus server protection against Slowloris
Copy link
Member

@gitferry gitferry left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for adding gosec!

Copy link

@KonradStaniec KonradStaniec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good, just small comments about timeouts

metrics/server.go Outdated Show resolved Hide resolved
Copy link
Member

@filippos47 filippos47 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good, thank you!

@vitsalis vitsalis merged commit dfa7e25 into main Oct 7, 2024
11 checks passed
@vitsalis vitsalis deleted the types-and-gosec branch October 7, 2024 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants