gitlab.gosec.G402-2

unknown
Download Count*
MIT
License

Use of deprecated TLS version which may result in the unauthorized retrieval of sensitive information. It is recommended to use TLS 1.2 or TLS 1.3 instead.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: gosec.G402-2
    patterns:
      - pattern-either:
          - pattern: tls.VersionTLS11
          - pattern: tls.VersionTLS10
    message: >
      Use of deprecated TLS version which may result in the unauthorized
      retrieval

      of sensitive information. It is recommended to use TLS 1.2 or TLS 1.3 instead.
    metadata:
      cwe: "CWE-310: Cryptographic Issues"
      owasp: "A05:2021: Security Misconfiguration"
      primary_identifier: gosec.G402-2
      secondary_identifiers:
        - name: Gosec Rule ID G402
          type: gosec_rule_id
          value: G402
      license: MIT
    languages:
      - go
    severity: WARNING