test yam 1

[guardrails-test]

No description provided.

[guardrails]

⚠️ We detected 15 security issues in this pull request:

Insecure Network Communication (10)

Docs	Details
💡	Title: Insecure gRPC client connection - withInsecure(), Severity: Medium not-going-anywhere/cmd/friends_client_net/main.go Line 19 in 645770c conn, err := grpc.Dial(address, grpc.WithInsecure(), grpc.WithBlock())
💡	Title: Insecure gRPC client connection - withInsecure(), Severity: Medium not-going-anywhere/cmd/ping_client/main.go Line 21 in 645770c conn, err := grpc.Dial(address, grpc.WithInsecure())
💡	Title: Insecure gRPC client connection - withInsecure(), Severity: Medium not-going-anywhere/cmd/web/main.go Line 97 in 645770c conn, err := grpc.Dial(serverAddress, grpc.WithInsecure(), grpc.WithBlock())
💡	Title: Insecure gRPC client connection - withInsecure(), Severity: Medium not-going-anywhere/cmd/web/main.go Line 143 in 645770c conn, err := grpc.Dial(serverAddress, grpc.WithInsecure(), grpc.WithBlock())
💡	Title: Insecure gRPC client connection - withInsecure(), Severity: Medium not-going-anywhere/cmd/web/main.go Line 202 in 645770c conn, err := grpc.Dial(serverAddress, grpc.WithInsecure(), grpc.WithBlock())
💡	Title: Insecure gRPC client connection - withInsecure(), Severity: Medium not-going-anywhere/cmd/web/main.go Line 264 in 645770c conn, err := grpc.Dial(serverAddress, grpc.WithInsecure(), grpc.WithBlock())
💡	Title: Insecure gRPC server connection, Severity: Medium not-going-anywhere/cmd/friends_server_net/main.go Line 246 in 645770c grpcserv := grpc.NewServer()
💡	Title: Insecure gRPC server connection, Severity: Medium not-going-anywhere/cmd/ping_server/main.go Line 37 in 645770c grpcserv := grpc.NewServer()
💡	Title: Plaintext HTTP Server, Severity: High not-going-anywhere/cmd/web/main.go Line 68 in 645770c http.ListenAndServe(address, router)
💡	Title: Look For Bad TLS Connection Settings, Severity: High not-going-anywhere/cmd/ping_client_secure/main.go Line 29 in 645770c InsecureSkipVerify: true,

More info on how to fix Insecure Network Communication in Go.

---

Insecure Use of SQL Queries (2)

Docs	Details
💡	Title: SQL Query Construction Using Format String, Severity: High not-going-anywhere/cmd/friends_server_net/main.go Line 78 in 645770c rows, err := s.dbHnd.Query(fmt.Sprintf(`SELECT username, uid FROM people WHERE username like "%%%s%%"`, in.GetUname()))
💡	Title: SQL Query Construction Using Format String, Severity: High not-going-anywhere/cmd/friends_server_net/main.go Line 123 in 645770c rows, err := s.dbHnd.Query(fmt.Sprintf(`SELECT username, postID, post FROM posts where username = "%s"`, in.GetUname()))

More info on how to fix Insecure Use of SQL Queries in Go.

---

Hard-Coded Secrets (3)

Docs	Details
💡	Title: Base64 High Entropy String, Severity: Medium not-going-anywhere/cmd/web/main.go Line 34 in 645770c key = []byte("xxzoL3R9zA25mztvbm9AWwBdCEqiVvgj")
💡	Title: Private Key, Severity: Medium not-going-anywhere/cmd/ping_server_secure/cert/server.key Line 1 in 645770c -----BEGIN RSA PRIVATE KEY-----
💡	Title: Private Key, Severity: Medium not-going-anywhere/scripts/cert/server.key Line 1 in 645770c -----BEGIN RSA PRIVATE KEY-----

More info on how to fix Hard-Coded Secrets in General.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.