This update for gosec fixes the following issues:
Changes in gosec:
- Update to version 2.30.0 (bsc#1287590, CVE-2026-97032):
* fix(g602): recognize equality comparison in minimumLenForBranch (#1796)
* fix(G112): honor read timeouts assigned through a struct field (#1798)
* fix(G112): report read timeouts explicitly set to zero (#1797)
* feat(G706): extend log/slog method coverage (#1795)
* fix(autofix): read the first text block of a Claude response (#1794)
* fix(autofix): give every AI request its own timeout (#1793)
* fix(resolve): treat constants from other packages as resolved (#1792)
* fix(autofix): return an error whe
This update for gosec fixes the following issues:
Changes in gosec:
- Update to version 2.25.0:
* chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#1617)
* fix: allow barry action to access secrets on fork PRs (#1616)
* fix: reduce G117 false positives for custom marshalers and transformed values (#1614) (#1615)
* Add barry security scanner as a step in the CI (#1612)
* chore(deps): update all dependencies (#1611)
* fix: prevent taint analysis hang on packages with many CHA call graph edges (#1608) (#1610)
* Add some skills for claude code to automate some tasks (#1609)
* Add G701-G706 rule-to-CWE mappings and