v2.23.0

Changelog

• 398ad54 feat: Support for adding taint analysis engine (#1486)
• 6eacd5c chore(deps): update all dependencies (#1494)
• 181a7cb chore(deps): update all dependencies (#1494)
• e2fa6ab chore(deps): update all dependencies (#1488)
• eb252ba Fix G602 analyzer panic that kills gosec process (#1491)
• 20d71a0 update go version to 1.25.7 (#1492)
• a631af8 Fix URL regexp and remove redundant Google regex patterns (#1485)
• 8968502 feat: implement global cache usage in rules (#1480)
• 04f729c chore(deps): update module google.golang.org/genai to v1.43.0 (#1484)
• ade0e8f refactor: optimize nosec parsing and reduce allocations (#1478)
• d24bbf7 Fix SARIF artifactChanges null validation error (#1483)
• 15cba7f feat: optimize GetCallInfo with per-package sync.Pool caching (#1481)
• 5288673 feat: implement entropy pre-filtering to optimize secret detection (#1479)
• d9a9bcd feat: ensure GoVersion is cached using sync.Once (#1477)
• 516260a Fix #1240: nosec comments now work with trailing open brackets (#1475)
• be0fd6d Debug Build Profiling Support: Code improvement suggestions for PR#1471 (#1476)
• b579523 Update the go version to 1.25.6 and 1.24.12 (#1474)
• bd3c738 G115: Enhance RangeAnalyzer with constant propagation and chained arithmetic support (#1470)
• 6897b36 chore(deps): update all dependencies (#1473)
• 9f20212 feat: support path-based rule exclusions via exclude-rules (#1465)
• 726d847 Optimize analyzer with parallel package processing (#1466)
• 3150b28 feat: add goanalysis package for nogo (#1449)
• 7284e15 Refactor Analyzers: Unify Range Logic & Optimize Allocations (#1464)
• 7a4ccef Optimize G115, G602, G407 analyzers to reduce allocations and memory (#1463)
• 833d791 refactor(g115): improve coverage (#1462)
• 0cc9e01 Refine G407 to improve detection and coverage of hardcoded nonces (#1460)
• 303f84d chore(deps): update all dependencies (#1461)
• 7387d22 Refactor rules to use callListRule base structure (#1458)
• 52f5dbf feat(slice): enhance slice bounds analysis with dynamic bounds handling (#1457)
• 649e2c8 remove deprecated ast.Object (#1455)
• 35a92b4 feat(sql): enhance SQL injection detection with improved string concatenation checks (#1454)
• bc9d2bc feat(rules): enhance subprocess variable checks (#1453)
• 8a5404e feat(resolve): enhance TryResolve to handle KeyValueExpr, IndexExpr, and SliceExpr (#1452)
• 0f6f21c feat: add secrets serialization G117 (#1451)
• 717706e feat(rules): add support for detecting high entropy strings in composite literals (#1447)
• 082deb6 whitelist crypto/rand Read from error checks (#1446)
• 095d529 chore(deps): update all dependencies (#1443)
• c073629 Improve slice bound check (#1442)
• 538a05c docs: add documentation for using gosec with private modules (#1441)
• 2580437 chore(deps): update all dependencies (#1440)
• 872b331 docs: add G116 rule description to README (#1439)
• dcf93a8 Update GitHub action to gosec 2.22.11 (#1438)