Please open an issue first before submitting large changes so we can discuss the approach.
git clone https://github.com/ravisastryk/cryptoguard-go
cd cryptoguard-go
go mod download
make build
make testSee existing rules in pkg/analyzer/analyzer.go. Each rule must implement the
Rule interface and provide: unique ID (CRYPTOXXX), CWE mapping, clear
description, fix recommendation, and test cases.
CRYPTO0XX: Weak algorithmsCRYPTO01X: Key managementCRYPTO02X: IV/nonce issuesCRYPTO03X: Timing attacksCRYPTO04X: Post-quantumCRYPTO05X: Advanced/novel
Run go fmt and go vet before committing. Add tests for new rules.
By contributing, you agree that your contributions will be licensed under Apache 2.0.