2876cca8fe
Includes: CLAUDE.md, settings.json, agents, commands, rules, skills, hooks, contexts, evals, get-shit-done, plugin configs (installed list and marketplace sources). Excludes credentials, runtime caches, telemetry, session data, and plugin binary cache.
35 lines
558 B
Markdown
35 lines
558 B
Markdown
---
|
|
paths:
|
|
- "**/*.go"
|
|
- "**/go.mod"
|
|
- "**/go.sum"
|
|
---
|
|
# Go Security
|
|
|
|
> This file extends [common/security.md](../common/security.md) with Go specific content.
|
|
|
|
## Secret Management
|
|
|
|
```go
|
|
apiKey := os.Getenv("OPENAI_API_KEY")
|
|
if apiKey == "" {
|
|
log.Fatal("OPENAI_API_KEY not configured")
|
|
}
|
|
```
|
|
|
|
## Security Scanning
|
|
|
|
- Use **gosec** for static security analysis:
|
|
```bash
|
|
gosec ./...
|
|
```
|
|
|
|
## Context & Timeouts
|
|
|
|
Always use `context.Context` for timeout control:
|
|
|
|
```go
|
|
ctx, cancel := context.WithTimeout(ctx, 5*time.Second)
|
|
defer cancel()
|
|
```
|