Attachment 227783 Details for Bug 258385 – devel/gokart: Static analysis tool for securing Go code

[patch] devel/gokart: Static analysis tool for securing Go code

0001-devel-gokart-new-port.patch (text/plain), 2.64 KB, created by Robert Clausecker on 2021-09-09 13:06:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Robert Clausecker

Created: 2021-09-09 13:06:00 UTC

Size: 2.64 KB

patch

obsolete

>From 8ae94b7406d604146e85478fb80efe5a37e60bf8 Mon Sep 17 00:00:00 2001
>From: Robert Clausecker <fuz@fuz.su>
>Date: Thu, 9 Sep 2021 13:59:54 +0200
>Subject: [PATCH] devel/gokart: new port
>
>---
> devel/Makefile         |  1 +
> devel/gokart/Makefile  | 17 +++++++++++++++++
> devel/gokart/distinfo  |  5 +++++
> devel/gokart/pkg-descr | 11 +++++++++++
> 4 files changed, 34 insertions(+)
> create mode 100644 devel/gokart/Makefile
> create mode 100644 devel/gokart/distinfo
> create mode 100644 devel/gokart/pkg-descr
>
>diff --git a/devel/Makefile b/devel/Makefile
>index 20d1f3f014a7..6ec25e8f7361 100644
>--- a/devel/Makefile
>+++ b/devel/Makefile
>@@ -874,6 +874,7 @@
>     SUBDIR += godot2-tools
>     SUBDIR += goffice
>     SUBDIR += gogs
>+    SUBDIR += gokart
>     SUBDIR += golangci-lint
>     SUBDIR += golint
>     SUBDIR += google-cloud-cpp
>diff --git a/devel/gokart/Makefile b/devel/gokart/Makefile
>new file mode 100644
>index 000000000000..9a3af1c2e721
>--- /dev/null
>+++ b/devel/gokart/Makefile
>@@ -0,0 +1,17 @@
>+PORTNAME=	gokart
>+DISTVERSIONPREFIX=	v
>+DISTVERSION=	0.2.0
>+CATEGORIES=	devel security
>+
>+MAINTAINER=	fuz@fuz.su
>+COMMENT=	Static analysis tool for securing Go code
>+
>+LICENSE=	MIT
>+LICENSE_FILE=	${WRKSRC}/LICENSE
>+
>+USES=		go:modules
>+GO_MODULE=	github.com/praetorian-inc/gokart
>+
>+PLIST_FILES=	bin/gokart
>+
>+.include <bsd.port.mk>
>diff --git a/devel/gokart/distinfo b/devel/gokart/distinfo
>new file mode 100644
>index 000000000000..4c2ff0483c8a
>--- /dev/null
>+++ b/devel/gokart/distinfo
>@@ -0,0 +1,5 @@
>+TIMESTAMP = 1631187589
>+SHA256 (go/devel_gokart/gokart-v0.2.0/v0.2.0.mod) = 32d3dfaeb74e86df0fd520a532f1ecefe3bd71ced8271ac464c64bc58f28ee49
>+SIZE (go/devel_gokart/gokart-v0.2.0/v0.2.0.mod) = 405
>+SHA256 (go/devel_gokart/gokart-v0.2.0/v0.2.0.zip) = 7f62c4e86fab5f3226ecda8ec31625fe913f515fc181a5eb77f9c3165c580439
>+SIZE (go/devel_gokart/gokart-v0.2.0/v0.2.0.zip) = 132596
>diff --git a/devel/gokart/pkg-descr b/devel/gokart/pkg-descr
>new file mode 100644
>index 000000000000..d738d4c03ac6
>--- /dev/null
>+++ b/devel/gokart/pkg-descr
>@@ -0,0 +1,11 @@
>+GoKart is a static analysis tool for Go that finds vulnerabilities using
>+the SSA (single static assignment) form of Go source code.  It is
>+capable of tracing the source of variables and function arguments to
>+determine whether input sources are safe, which reduces the number of
>+false positives compared to other Go security scanners.  For instance, a
>+SQL query that is concatenated with a variable might traditionally be
>+flagged as SQL injection; however, GoKart can figure out if the variable
>+is actually a constant or constant equivalent, in which case there is no
>+vulnerability.
>+
>+WWW: https://github.com/praetorian-inc/gokart
>-- 
>2.32.0
>

Actions: View | Diff

Attachments on bug 258385: 227783