aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorÖzgür Kesim <oec@codeblau.de>2023-06-20 12:28:42 +0200
committerÖzgür Kesim <oec@codeblau.de>2023-06-20 12:28:42 +0200
commitf8c6f74e2fa4d0fbf007446b3454f08348640148 (patch)
treecd0f6d4660bacd302117b24f935e8885155abeb7
parente009cb4234f3fe70cce7dd4c3af921da962ecb52 (diff)
update README
-rw-r--r--README.md30
1 files changed, 30 insertions, 0 deletions
diff --git a/README.md b/README.md
index e69de29..c398132 100644
--- a/README.md
+++ b/README.md
@@ -0,0 +1,30 @@
+# Tool to find dangerous imports in go code
+
+The tool checks for imports for a given `go.mod` file that
+
+- uses `unsafe`
+- uses cgo
+- import `/net/http/pprof`
+
+The checks are performed transitively, following dependencies.
+
+
+# Parameters
+
+```
+Usage of ./goosebumps:
+ -cc
+ check for imports of cgo
+ -ci
+ check for implementations of init()
+ -cp
+ check for imports of net/http/pprof
+ -cu
+ check for imports of unsafe
+ -exempt string
+ domains exempt from the search, seperated by space (default "golang.org")
+ -mod string
+ go.mod file (default "go.mod")
+ -modcache string
+ location of go mod cache (default "$GOROOT/pkg/mod")
+```