>>> gosec: Building community/gosec 2.28.0-r1 (using abuild 3.18.0_rc7-r1) started Sat, 24 Oct 2026 12:05:15 +0000 >>> gosec: Validating /home/buildozer/aports/community/gosec/APKBUILD... >>> gosec: Analyzing dependencies... >>> gosec: Installing for build: build-base go (1/2) Installing go (1.27.3-r0) (2/2) Installing .makedepends-gosec (20261024.120516) Executing busybox-1.38.0-r7.trigger OK: 628.0 MiB in 109 packages >>> gosec: Cleaning up srcdir >>> gosec: Cleaning up pkgdir >>> gosec: Cleaning up tmpdir >>> gosec: Fetching https://distfiles.alpinelinux.org/distfiles/edge/gosec-2.28.0.tar.gz Connecting to distfiles.alpinelinux.org (172.105.82.32:443) saving to '/var/cache/distfiles/edge/gosec-2.28.0.tar.gz.part' gosec-2.28.0.tar.gz. 100% |********************************| 380k 0:00:00 ETA '/var/cache/distfiles/edge/gosec-2.28.0.tar.gz.part' saved /var/cache/distfiles/edge/gosec-2.28.0.tar.gz: OK >>> gosec: Fetching https://distfiles.alpinelinux.org/distfiles/edge/gosec-2.28.0.tar.gz /var/cache/distfiles/edge/gosec-2.28.0.tar.gz: OK >>> gosec: Unpacking /var/cache/distfiles/edge/gosec-2.28.0.tar.gz... fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git make build fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git make[1]: Entering directory '/home/buildozer/aports/community/gosec/src/gosec-2.28.0' fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git go build -ldflags " -X 'main.Version=' -X 'main.GitTag=' -X 'main.BuildDate=2026-10-24T12:05:18Z'" -o gosec ./cmd/gosec/ fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git go: downloading github.com/ccojocar/zxcvbn-go v1.0.4 go: downloading github.com/gookit/color v1.6.1 go: downloading github.com/anthropics/anthropic-sdk-go v1.57.0 go: downloading github.com/openai/openai-go/v3 v3.42.0 go: downloading google.golang.org/genai v1.63.0 go: downloading go.yaml.in/yaml/v3 v3.0.4 go: downloading github.com/google/uuid v1.6.0 go: downloading golang.org/x/tools v0.48.0 go: downloading golang.org/x/sync v0.22.0 go: downloading github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e go: downloading cloud.google.com/go/auth v0.21.0 go: downloading cloud.google.com/go v0.123.0 go: downloading github.com/gorilla/websocket v1.5.3 go: downloading github.com/google/go-cmp v0.7.0 go: downloading github.com/googleapis/gax-go/v2 v2.23.0 go: downloading google.golang.org/api v0.288.0 go: downloading go.opentelemetry.io/otel v1.44.0 go: downloading go.opentelemetry.io/otel/trace v1.44.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 go: downloading cloud.google.com/go/compute/metadata v0.9.0 go: downloading golang.org/x/net v0.57.0 go: downloading github.com/google/s2a-go v0.1.9 go: downloading google.golang.org/grpc v1.82.0 go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.18 go: downloading github.com/tidwall/sjson v1.2.5 go: downloading github.com/tidwall/gjson v1.19.0 go: downloading github.com/invopop/jsonschema v0.14.0 go: downloading github.com/pb33f/ordered-map/v2 v2.3.1 go: downloading github.com/standard-webhooks/standard-webhooks/libraries v0.0.1 go: downloading github.com/felixge/httpsnoop v1.1.0 go: downloading go.opentelemetry.io/otel/metric v1.44.0 go: downloading google.golang.org/protobuf v1.36.11 go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800 go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.6 go: downloading github.com/buger/jsonparser v1.2.0 go: downloading github.com/bahlo/generic-list-go v0.2.0 go: downloading github.com/tidwall/pretty v1.2.1 go: downloading github.com/tidwall/match v1.2.0 go: downloading golang.org/x/crypto v0.54.0 go: downloading golang.org/x/sys v0.47.0 go: downloading golang.org/x/text v0.40.0 go: downloading golang.org/x/mod v0.38.0 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 make[1]: Leaving directory '/home/buildozer/aports/community/gosec/src/gosec-2.28.0' go: downloading github.com/onsi/ginkgo/v2 v2.32.0 go: downloading github.com/go-task/slim-sprig/v3 v3.0.0 go: downloading github.com/Masterminds/semver/v3 v3.5.0 go: downloading github.com/google/pprof v0.0.0-20260709232956-b9395ee17fa0 go: downloading github.com/onsi/gomega v1.42.1 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc go: downloading gopkg.in/yaml.v3 v3.0.1 Running Suite: gosec Suite - /home/buildozer/aports/community/gosec/src/gosec-2.28.0 ==================================================================================== Random Seed: 1792843552 Will run 289 of 289 specs ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve basic literal github.com/securego/gosec/v2/resolve_test.go:15 • [0.102 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve identifier github.com/securego/gosec/v2/resolve_test.go:35 • [0.103 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve variable identifier github.com/securego/gosec/v2/resolve_test.go:55 • [0.139 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve variable identifier with no declaration github.com/securego/gosec/v2/resolve_test.go:75 • [0.091 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve assign statement github.com/securego/gosec/v2/resolve_test.go:96 • [0.096 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve assign statement without rhs github.com/securego/gosec/v2/resolve_test.go:117 • [0.076 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve assign statement with unsolvable rhs github.com/securego/gosec/v2/resolve_test.go:139 • [0.063 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve a binary statement github.com/securego/gosec/v2/resolve_test.go:161 • [0.082 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve value spec github.com/securego/gosec/v2/resolve_test.go:180 • [0.086 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve value spec without values github.com/securego/gosec/v2/resolve_test.go:200 • [0.073 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve value spec with unsolvable value github.com/securego/gosec/v2/resolve_test.go:222 • [0.072 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully resolve composite literal github.com/securego/gosec/v2/resolve_test.go:244 • [0.097 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve composite literal without elst github.com/securego/gosec/v2/resolve_test.go:263 • [0.079 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve composite literal with unsolvable elst github.com/securego/gosec/v2/resolve_test.go:283 • [0.069 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve call expressions github.com/securego/gosec/v2/resolve_test.go:303 • [0.067 seconds] ------------------------------ Resolve ast node to concrete value when attempting to resolve an ast node should successfully not resolve call expressions github.com/securego/gosec/v2/resolve_test.go:322 • [0.128 seconds] ------------------------------ ReportInfo NewReportInfo should create a report with issues, metrics, and errors github.com/securego/gosec/v2/report_test.go:13 • [0.000 seconds] ------------------------------ ReportInfo NewReportInfo should handle empty issues github.com/securego/gosec/v2/report_test.go:35 • [0.000 seconds] ------------------------------ ReportInfo NewReportInfo should handle nil metrics and errors github.com/securego/gosec/v2/report_test.go:44 • [0.000 seconds] ------------------------------ ReportInfo WithVersion should set the gosec version github.com/securego/gosec/v2/report_test.go:56 • [0.000 seconds] ------------------------------ ReportInfo WithVersion should overwrite existing version github.com/securego/gosec/v2/report_test.go:64 • [0.000 seconds] ------------------------------ ReportInfo WithVersion should allow empty version string github.com/securego/gosec/v2/report_test.go:72 • [0.000 seconds] ------------------------------ PathExclusionFilter NewPathExclusionFilter with valid rules should create a filter with single rule github.com/securego/gosec/v2/path_filter_test.go:16 • [0.000 seconds] ------------------------------ PathExclusionFilter NewPathExclusionFilter with valid rules should create a filter with multiple rules github.com/securego/gosec/v2/path_filter_test.go:25 • [0.000 seconds] ------------------------------ PathExclusionFilter NewPathExclusionFilter with valid rules should handle empty rules slice github.com/securego/gosec/v2/path_filter_test.go:36 • [0.000 seconds] ------------------------------ PathExclusionFilter NewPathExclusionFilter with invalid rules should reject empty path github.com/securego/gosec/v2/path_filter_test.go:44 • [0.000 seconds] ------------------------------ PathExclusionFilter NewPathExclusionFilter with invalid rules should reject invalid regex github.com/securego/gosec/v2/path_filter_test.go:53 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with specific rule exclusions should exclude matching path and rule github.com/securego/gosec/v2/path_filter_test.go:78 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with specific rule exclusions should not exclude matching path with non-matching rule github.com/securego/gosec/v2/path_filter_test.go:83 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with specific rule exclusions should not exclude non-matching path github.com/securego/gosec/v2/path_filter_test.go:88 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with specific rule exclusions should handle nested paths correctly github.com/securego/gosec/v2/path_filter_test.go:93 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with wildcard rule exclusion should exclude any rule for matching path github.com/securego/gosec/v2/path_filter_test.go:111 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with wildcard rule exclusion should not exclude non-matching paths github.com/securego/gosec/v2/path_filter_test.go:118 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with Windows-style paths should normalize backslashes to forward slashes github.com/securego/gosec/v2/path_filter_test.go:133 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with nil or empty filter should not exclude anything with nil filter github.com/securego/gosec/v2/path_filter_test.go:140 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with nil or empty filter should not exclude anything with empty rules github.com/securego/gosec/v2/path_filter_test.go:145 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with complex regex patterns should match test files github.com/securego/gosec/v2/path_filter_test.go:163 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with complex regex patterns should match cmd or tools prefix github.com/securego/gosec/v2/path_filter_test.go:169 • [0.000 seconds] ------------------------------ PathExclusionFilter ShouldExclude with complex regex patterns should match mock/fake/stub directories github.com/securego/gosec/v2/path_filter_test.go:175 • [0.000 seconds] ------------------------------ PathExclusionFilter FilterIssues should filter matching issues github.com/securego/gosec/v2/path_filter_test.go:198 • [0.000 seconds] ------------------------------ PathExclusionFilter FilterIssues should handle empty issues slice github.com/securego/gosec/v2/path_filter_test.go:212 • [0.000 seconds] ------------------------------ PathExclusionFilter FilterIssues should preserve issue order github.com/securego/gosec/v2/path_filter_test.go:218 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with valid input should parse single rule github.com/securego/gosec/v2/path_filter_test.go:236 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with valid input should parse multiple rules separated by semicolon github.com/securego/gosec/v2/path_filter_test.go:244 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with valid input should handle wildcard rule github.com/securego/gosec/v2/path_filter_test.go:254 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with valid input should handle empty input github.com/securego/gosec/v2/path_filter_test.go:261 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with valid input should trim whitespace github.com/securego/gosec/v2/path_filter_test.go:267 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with invalid input should reject missing colon separator github.com/securego/gosec/v2/path_filter_test.go:277 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with invalid input should reject empty path github.com/securego/gosec/v2/path_filter_test.go:283 • [0.000 seconds] ------------------------------ PathExclusionFilter ParseCLIExcludeRules with invalid input should reject empty rules github.com/securego/gosec/v2/path_filter_test.go:289 • [0.000 seconds] ------------------------------ PathExclusionFilter MergeExcludeRules should merge CLI and config rules with CLI first github.com/securego/gosec/v2/path_filter_test.go:298 • [0.000 seconds] ------------------------------ PathExclusionFilter MergeExcludeRules should handle empty CLI rules github.com/securego/gosec/v2/path_filter_test.go:312 • [0.000 seconds] ------------------------------ PathExclusionFilter MergeExcludeRules should handle empty config rules github.com/securego/gosec/v2/path_filter_test.go:321 • [0.000 seconds] ------------------------------ Import Tracker when tracking a file should parse the imports from file github.com/securego/gosec/v2/import_tracker_test.go:13 • [0.111 seconds] ------------------------------ Import Tracker when tracking a file should parse the named imports from file github.com/securego/gosec/v2/import_tracker_test.go:33 • [0.128 seconds] ------------------------------ Call List should not return any matches when empty github.com/securego/gosec/v2/call_list_test.go:19 • [0.000 seconds] ------------------------------ Call List should be possible to add a single call github.com/securego/gosec/v2/call_list_test.go:23 • [0.000 seconds] ------------------------------ Call List should be possible to add multiple calls at once github.com/securego/gosec/v2/call_list_test.go:34 • [0.000 seconds] ------------------------------ Call List should be possible to add pointer call github.com/securego/gosec/v2/call_list_test.go:48 • [0.000 seconds] ------------------------------ Call List should be possible to check pointer call github.com/securego/gosec/v2/call_list_test.go:55 • [0.000 seconds] ------------------------------ Call List should not return a match if none are present github.com/securego/gosec/v2/call_list_test.go:62 • [0.000 seconds] ------------------------------ Call List should match a call based on selector and ident github.com/securego/gosec/v2/call_list_test.go:67 • [0.000 seconds] ------------------------------ Call List should match a package call expression github.com/securego/gosec/v2/call_list_test.go:72 • [0.146 seconds] ------------------------------ Call List should match a package call expression github.com/securego/gosec/v2/call_list_test.go:97 • [0.138 seconds] ------------------------------ Call List should match a package call expression github.com/securego/gosec/v2/call_list_test.go:122 • [0.147 seconds] ------------------------------ Call List should match a call expression github.com/securego/gosec/v2/call_list_test.go:147 [FAILED] in [It] - github.com/securego/gosec/v2/call_list_test.go:171 @ 10/24/26 12:05:58.77 • [FAILED] [0.141 seconds] Call List [It] should match a call expression github.com/securego/gosec/v2/call_list_test.go:147 [FAILED] Expected : 1 to equal : 5 In [It] at: github.com/securego/gosec/v2/call_list_test.go:171 @ 10/24/26 12:05:58.77 ------------------------------ SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS Summarizing 1 Failure: [FAIL] Call List [It] should match a call expression github.com/securego/gosec/v2/call_list_test.go:171 Ran 66 of 289 Specs in 2.250 seconds FAIL! -- 65 Passed | 1 Failed | 0 Pending | 223 Skipped --- FAIL: TestGosec (2.26s) FAIL Ginkgo ran 1 suite in 5.945959486s Test Suite Failed exit status 1 >>> ERROR: gosec: check failed >>> gosec: Uninstalling dependencies... (1/2) Purging .makedepends-gosec (20261024.120516) (2/2) Purging go (1.27.3-r0) Executing busybox-1.38.0-r7.trigger OK: 442.2 MiB in 107 packages