>>> gosec: Building community/gosec 2.28.0-r0 (using abuild 3.18.0_rc7-r1) started Fri, 16 Oct 2026 21:37:39 +0000 >>> gosec: Validating /home/buildozer/aports/community/gosec/APKBUILD... >>> gosec: Analyzing dependencies... >>> gosec: Installing for build: build-base go (1/2) Installing go (1.27.2-r0) (2/2) Installing .makedepends-gosec (20261016.213741) Executing busybox-1.38.0-r7.trigger OK: 428.2 MiB in 104 packages >>> gosec: Cleaning up srcdir >>> gosec: Cleaning up pkgdir >>> gosec: Cleaning up tmpdir >>> gosec: Fetching https://distfiles.alpinelinux.org/distfiles/v3.25/gosec-2.28.0.tar.gz Connecting to distfiles.alpinelinux.org (172.105.82.32:443) wget: server returned error: HTTP/1.1 404 Not Found >>> gosec: Fetching gosec-2.28.0.tar.gz::https://github.com/securego/gosec/archive/refs/tags/v2.28.0.tar.gz Connecting to github.com (20.26.156.215:443) Connecting to codeload.github.com (20.26.156.216:443) saving to '/var/cache/distfiles/v3.25/gosec-2.28.0.tar.gz.part' gosec-2.28.0.tar.gz. 12971 --:--:-- ETA gosec-2.28.0.tar.gz. 100% |********************************| 380k 0:00:00 ETA '/var/cache/distfiles/v3.25/gosec-2.28.0.tar.gz.part' saved /var/cache/distfiles/v3.25/gosec-2.28.0.tar.gz: OK >>> gosec: Fetching https://distfiles.alpinelinux.org/distfiles/v3.25/gosec-2.28.0.tar.gz /var/cache/distfiles/v3.25/gosec-2.28.0.tar.gz: OK >>> gosec: Unpacking /var/cache/distfiles/v3.25/gosec-2.28.0.tar.gz... fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git make build fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git make[1]: Entering directory '/home/buildozer/aports/community/gosec/src/gosec-2.28.0' fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git go build -ldflags " -X 'main.Version=' -X 'main.GitTag=' -X 'main.BuildDate=2026-10-16T21:37:43Z'" -o gosec ./cmd/gosec/ fatal: not a git repository (or any of the parent directories): .git fatal: not a git repository (or any of the parent directories): .git go: downloading github.com/anthropics/anthropic-sdk-go v1.57.0 go: downloading github.com/openai/openai-go/v3 v3.42.0 go: downloading google.golang.org/genai v1.63.0 go: downloading golang.org/x/sync v0.22.0 go: downloading golang.org/x/tools v0.48.0 go: downloading github.com/ccojocar/zxcvbn-go v1.0.4 go: downloading github.com/gookit/color v1.6.1 go: downloading go.yaml.in/yaml/v3 v3.0.4 go: downloading github.com/google/uuid v1.6.0 go: downloading cloud.google.com/go/auth v0.21.0 go: downloading cloud.google.com/go v0.123.0 go: downloading github.com/google/go-cmp v0.7.0 go: downloading github.com/gorilla/websocket v1.5.3 go: downloading github.com/invopop/jsonschema v0.14.0 go: downloading github.com/pb33f/ordered-map/v2 v2.3.1 go: downloading github.com/standard-webhooks/standard-webhooks/libraries v0.0.1 go: downloading github.com/tidwall/gjson v1.19.0 go: downloading github.com/tidwall/sjson v1.2.5 go: downloading github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e go: downloading github.com/googleapis/gax-go/v2 v2.23.0 go: downloading cloud.google.com/go/compute/metadata v0.9.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 go: downloading go.opentelemetry.io/otel v1.44.0 go: downloading go.opentelemetry.io/otel/trace v1.44.0 go: downloading golang.org/x/net v0.57.0 go: downloading google.golang.org/api v0.288.0 go: downloading golang.org/x/mod v0.38.0 go: downloading github.com/google/s2a-go v0.1.9 go: downloading google.golang.org/grpc v1.82.0 go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.18 go: downloading github.com/bahlo/generic-list-go v0.2.0 go: downloading github.com/buger/jsonparser v1.2.0 go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.6 go: downloading github.com/tidwall/match v1.2.0 go: downloading github.com/tidwall/pretty v1.2.1 go: downloading go.opentelemetry.io/otel/metric v1.44.0 go: downloading google.golang.org/protobuf v1.36.11 go: downloading github.com/felixge/httpsnoop v1.1.0 go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading golang.org/x/text v0.40.0 go: downloading golang.org/x/sys v0.47.0 go: downloading golang.org/x/crypto v0.54.0 make[1]: Leaving directory '/home/buildozer/aports/community/gosec/src/gosec-2.28.0' go: downloading github.com/onsi/ginkgo/v2 v2.32.0 go: downloading github.com/Masterminds/semver/v3 v3.5.0 go: downloading github.com/go-task/slim-sprig/v3 v3.0.0 go: downloading github.com/google/pprof v0.0.0-20260709232956-b9395ee17fa0 go: downloading github.com/onsi/gomega v1.42.1 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 go: downloading gopkg.in/yaml.v3 v3.0.1 Running Suite: gosec Suite - /home/buildozer/aports/community/gosec/src/gosec-2.28.0 ==================================================================================== Random Seed: 1792186695 Will run 289 of 289 specs ------------------------------ Rule when using a ruleset should be possible to register a rule for multiple ast.Node github.com/securego/gosec/v2/rule_test.go:59 • [0.000 seconds] ------------------------------ Rule when using a ruleset should not register a rule when no ast.Nodes are specified github.com/securego/gosec/v2/rule_test.go:71 • [0.000 seconds] ------------------------------ Rule when using a ruleset should be possible to retrieve a list of rules for a given node type github.com/securego/gosec/v2/rule_test.go:76 • [0.000 seconds] ------------------------------ Rule when using a ruleset should register a suppressed rule github.com/securego/gosec/v2/rule_test.go:87 • [0.000 seconds] ------------------------------ Cli vflag test value must be empty as parameter value contains invalid character github.com/securego/gosec/v2/flag_test.go:15 • [0.000 seconds] ------------------------------ invalid value "-incorrect" for flag -flag1: flag value cannot start with - Usage of flag1: -flag1 value Cli vflag test value must be empty as parameter value contains invalid character without equal sign github.com/securego/gosec/v2/flag_test.go:25 invalid value " -incorrect" for flag -test2: flag value cannot start with - Usage of test2: -test2 value • [0.000 seconds] ------------------------------ Cli vflag test value must not be empty as parameter value contains valid character github.com/securego/gosec/v2/flag_test.go:35 • [0.000 seconds] ------------------------------ Call List should not return any matches when empty github.com/securego/gosec/v2/call_list_test.go:19 • [0.000 seconds] ------------------------------ Call List should be possible to add a single call github.com/securego/gosec/v2/call_list_test.go:23 • [0.000 seconds] ------------------------------ Call List should be possible to add multiple calls at once github.com/securego/gosec/v2/call_list_test.go:34 • [0.000 seconds] ------------------------------ Call List should be possible to add pointer call github.com/securego/gosec/v2/call_list_test.go:48 • [0.000 seconds] ------------------------------ Call List should be possible to check pointer call github.com/securego/gosec/v2/call_list_test.go:55 • [0.000 seconds] ------------------------------ Call List should not return a match if none are present github.com/securego/gosec/v2/call_list_test.go:62 • [0.000 seconds] ------------------------------ Call List should match a call based on selector and ident github.com/securego/gosec/v2/call_list_test.go:67 • [0.000 seconds] ------------------------------ Call List should match a package call expression github.com/securego/gosec/v2/call_list_test.go:72 • [0.056 seconds] ------------------------------ Call List should match a package call expression github.com/securego/gosec/v2/call_list_test.go:97 • [0.045 seconds] ------------------------------ Call List should match a package call expression github.com/securego/gosec/v2/call_list_test.go:122 • [0.058 seconds] ------------------------------ Call List should match a call expression github.com/securego/gosec/v2/call_list_test.go:147 [FAILED] in [It] - github.com/securego/gosec/v2/call_list_test.go:171 @ 10/16/26 21:38:19.512 • [FAILED] [0.043 seconds] Call List [It] should match a call expression github.com/securego/gosec/v2/call_list_test.go:147 [FAILED] Expected : 1 to equal : 5 In [It] at: github.com/securego/gosec/v2/call_list_test.go:171 @ 10/16/26 21:38:19.512 ------------------------------ SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS Summarizing 1 Failure: [FAIL] Call List [It] should match a call expression github.com/securego/gosec/v2/call_list_test.go:171 Ran 18 of 289 Specs in 0.205 seconds FAIL! -- 17 Passed | 1 Failed | 0 Pending | 271 Skipped --- FAIL: TestGosec (0.21s) FAIL Ginkgo ran 1 suite in 4.374812229s Test Suite Failed exit status 1 >>> ERROR: gosec: check failed >>> gosec: Uninstalling dependencies... (1/2) Purging .makedepends-gosec (20261016.213741) (2/2) Purging go (1.27.2-r0) Executing busybox-1.38.0-r7.trigger OK: 239.6 MiB in 102 packages