From f8c6f74e2fa4d0fbf007446b3454f08348640148 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=96zg=C3=BCr=20Kesim?= Date: Tue, 20 Jun 2023 12:28:42 +0200 Subject: [PATCH] update README --- README.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/README.md b/README.md index e69de29..c398132 100644 --- a/README.md +++ b/README.md @@ -0,0 +1,30 @@ +# Tool to find dangerous imports in go code + +The tool checks for imports for a given `go.mod` file that + +- uses `unsafe` +- uses cgo +- import `/net/http/pprof` + +The checks are performed transitively, following dependencies. + + +# Parameters + +``` +Usage of ./goosebumps: + -cc + check for imports of cgo + -ci + check for implementations of init() + -cp + check for imports of net/http/pprof + -cu + check for imports of unsafe + -exempt string + domains exempt from the search, seperated by space (default "golang.org") + -mod string + go.mod file (default "go.mod") + -modcache string + location of go mod cache (default "$GOROOT/pkg/mod") +```