Merge pull request #222 from ccojocar/vendor_folder_flag

Cosmin Cojocar · web-flow · commit c0db4868207d · 2018-07-30T09:23:52.000+02:00
Add a flag to turn on scanning on vendor folder
diff --git a/cmd/gosec/main.go b/cmd/gosec/main.go
@@ -91,6 +91,8 @@ var (
 	// go build tags
 	flagBuildTags = flag.String("tags", "", "Comma separated list of build tags")
 
+	flagScanVendor = flag.Bool("vendor", false, "Scan the vendor folder")
+
 	logger *log.Logger
 )
 
@@ -278,8 +280,10 @@ func main() {
 	for _, pkg := range gotool.ImportPaths(cleanPaths(flag.Args())) {
 
 		// Skip vendor directory
-		if vendor.MatchString(pkg) {
-			continue
+		if !*flagScanVendor {
+			if vendor.MatchString(pkg) {
+				continue
+			}
 		}
 		packages = append(packages, resolvePackage(pkg, gopaths))
 	}

Original file line number	Diff line number	Diff line change
`@@ -91,6 +91,8 @@ var (`
`91`	`91`	`// go build tags`
`92`	`92`	`flagBuildTags = flag.String("tags", "", "Comma separated list of build tags")`
`93`	`93`
	`94`	`+ flagScanVendor = flag.Bool("vendor", false, "Scan the vendor folder")`
	`95`	`+`
`94`	`96`	`logger *log.Logger`
`95`	`97`	`)`
`96`	`98`
`@@ -278,8 +280,10 @@ func main() {`
`278`	`280`	`for _, pkg := range gotool.ImportPaths(cleanPaths(flag.Args())) {`
`279`	`281`
`280`	`282`	`// Skip vendor directory`
`281`		`- if vendor.MatchString(pkg) {`
`282`		`- continue`
	`283`	`+ if !*flagScanVendor {`
	`284`	`+ if vendor.MatchString(pkg) {`
	`285`	`+ continue`
	`286`	`+ }`
`283`	`287`	`}`
`284`	`288`	`packages = append(packages, resolvePackage(pkg, gopaths))`
`285`	`289`	`}`