app/utils.go

@@ -2,7 +2,7 @@ package app
 
 import (
 	"encoding/json"
-	"math/rand"
+	"math/rand" // #nosec G702
 	"time"
 
 	"github.com/cosmos/cosmos-sdk/codec"

ethereum/eip712/eip712.go

@@ -5,7 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"math/big"
-	"reflect"
+	"reflect" // #nosec G702
 	"strings"
 	"time"
 

gql/resolver.go

@@ -313,6 +313,7 @@ func (q queryResolver) GetBondsByOwner(ctx context.Context, address string) (*Ow
 
 	ownerBonds := make([]*Bond, len(bondResp.GetBonds()))
 	for i, bond := range bondResp.GetBonds() {
+		// #nosec G601
 		bondObj, err := getGQLBond(&bond) //nolint: all
 		if err != nil {
 			return nil, err

gql/status.go

@@ -91,7 +91,7 @@ func getValidatorSet(client client.Context) ([]*ValidatorInfo, error) {
 
 // GetDiskUsage returns disk usage for the given path.
 func GetDiskUsage(dirPath string) (string, error) {
-	out, err := exec.Command("du", "-sh", dirPath).Output()
+	out, err := exec.Command("du", "-sh", dirPath).Output() // #nosec G204
 	if err != nil {
 		return "", err
 	}

gql/util.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"reflect"
+	"reflect" // #nosec G702
 	"strconv"
 
 	auctiontypes "github.com/cerc-io/laconicd/x/auction/types"
@@ -166,11 +166,11 @@ func GetGQLAuction(auction *auctiontypes.Auction, bids []*auctiontypes.Bid) (*Au
 func getReferences(ctx context.Context, resolver QueryResolver, r *nstypes.RecordType) ([]*Record, error) {
 	var ids []string
 
-	for _, value := range r.Attributes {
+	for key := range r.Attributes {
 		//nolint: all
-		switch value.(type) {
+		switch r.Attributes[key].(type) {
 		case interface{}:
-			if obj, ok := value.(map[string]interface{}); ok {
+			if obj, ok := r.Attributes[key].(map[string]interface{}); ok {
 				if _, ok := obj["/"]; ok && len(obj) == 1 {
 					if _, ok := obj["/"].(string); ok {
 						ids = append(ids, obj["/"].(string))

rpc/namespaces/ethereum/debug/api.go

@@ -6,7 +6,7 @@ import (
 	"fmt"
 	"io"
 	"os"
-	"runtime"
+	"runtime" // #nosec G702
 	"runtime/debug"
 	"runtime/pprof"
 	"sync"

version/version.go

@@ -2,7 +2,7 @@ package version
 
 import (
 	"fmt"
-	"runtime"
+	"runtime" // #nosec G702
 )
 
 var (

x/auction/client/cli/tx.go

@@ -169,7 +169,7 @@ func GetCmdRevealBid() *cobra.Command {
 			auctionID := args[0]
 			revealFilePath := args[1]
 
-			revealBytes, err := ioutil.ReadFile(revealFilePath)
+			revealBytes, err := ioutil.ReadFile(revealFilePath) // #nosec G304
 			if err != nil {
 				return err
 			}

x/auction/genesis.go

@@ -29,6 +29,7 @@ func ExportGenesis(ctx sdk.Context, keeper keeper.Keeper) types.GenesisState {
 
 	genesisAuctions := []*types.Auction{}
 	for _, auction := range auctions {
+		// #nosec G601
 		genesisAuctions = append(genesisAuctions, &auction) //nolint: all
 	}
 	return types.GenesisState{Params: params, Auctions: genesisAuctions}

x/evm/module.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"math/rand"
+	"math/rand" // #nosec G702
 
 	"github.com/gorilla/mux"
 	"github.com/grpc-ecosystem/grpc-gateway/runtime"

x/feemarket/module.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"math/rand"
+	"math/rand" // #nosec G702
 
 	"github.com/gorilla/mux"
 	"github.com/grpc-ecosystem/grpc-gateway/runtime"

x/nameservice/client/cli/tx.go

@@ -375,7 +375,7 @@ $ %s tx %s delete-name [crn]
 func GetPayloadFromFile(filePath string) (*types.PayloadType, error) {
 	var payload types.PayloadType
 
-	data, err := ioutil.ReadFile(filePath)
+	data, err := ioutil.ReadFile(filePath) // #nosec G304
 	if err != nil {
 		return nil, err
 	}

x/nameservice/genesis.go

@@ -65,7 +65,7 @@ func ExportGenesis(ctx sdk.Context, keeper keeper.Keeper) types.GenesisState {
 		authorityEntries = append(authorityEntries, types.AuthorityEntry{
 			Name:  name,
 			Entry: &record, //nolint: all
-		})
+		}) // #nosec G601
 	}
 
 	names := keeper.ListNameRecords(ctx)