Changelog
- [223e19] chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#1617)
- [b23a9e] fix: allow barry action to access secrets on fork PRs (#1616)
- [355cfa] fix: reduce G117 false positives for custom marshalers and transformed values (#1614) (#1615)
- [744bfb] Add barry security scanner as a step in the CI (#1612)
- [4fde15] chore(deps): update all dependencies (#1611)
- [dec52c] fix: prevent taint analysis hang on packages with many CHA call graph edges (#1608) (#1610)
- [a0de8b] Add some skills for claude code to automate some tasks (#1609)
- [c2dfce] Add G701-G706 rule-to-CWE mappings and CWE-117, CWE-918 entries (#1606)
- [8aec3f] fix: skip SSA analysis on ill-typed packages to prevent panic (#1607)
- [1ced32] Port G120 from SSA-based to taint analysis (fixes [#1600], [#1603]) (#1605)
- [befce8] fix(G118): eliminate false positive for package-level cancel variables (#1602)
- [b7b2c7] feat: add G124 rule for insecure HTTP cookie configuration (#1599)
- [6e66a9] feat: add G709 rule for unsafe deserialization of untrusted data (#1598)
- [e7ea23] feat: add G708 rule for server-side template injection via text/template (#1597)
- [889546] fix(G118): eliminate false positive when cancel is called via struct field in a closure (#1596)
- [619ce2] Fix infinite recursion in interprocedural taint analysis (#1594)
- [0e0eb1] Fix G118 false positive when cancel is stored in returned struct field (#1593)
- [59a9da] Fix G118 false positive on cancel called inside goroutine closure (#1592)
- [cbf46b] fix(analyzer): per-package rule instantiation eliminates concurrent map crash (#1589)
- [c6c3ba] chore(deps): update all dependencies (#1588)
- [c709ed] fix(G118): treat returned cancel func as called (fixes [#1584]) (#1585)
- [fa74dd] chore(go): update supported Go versions to 1.25.8 and 1.26.1 (#1583)
- [cd1f29] Update the README with the correct version of the Github action for gosec (#1582)
- [5887ae] chore(deps): update all dependencies (#1579)
- [6641fc] Fix G115 false positives for guarded int64-to-byte conversions (#1578)
- [3c9c3d] Update the container image migration notice (#1576)
- [973e94] chore(action): bump gosec to 2.24.7 (#1575)