Currently Semgrep CI fails because of the following error:
┌─────────────────────────┐
│ 1 Blocking Code Finding │
└─────────────────────────┘
pkg/octopus/octopus.go
❯❯❱ go.grpc.security.grpc-server-insecure-connection.grpc-server-insecure-connection
Found an insecure gRPC server without 'grpc.Creds()' or options with credentials. This allows for a
connection without encryption to this server. A malicious attacker could tamper with the gRPC
message, which could compromise the machine. Include credentials derived from an SSL certificate in
order to create a secure gRPC connection. You can create credentials using
'credentials.NewServerTLSFromFile("cert.pem", "cert.key")'.
Details: https://sg.run/PwW
134┆ s := grpc.NewServer()
Taint comes from:
134┆ s := grpc.NewServer()
This is how taint reaches the sink:
134┆ s := grpc.NewServer()
We should address this error either by fixing it or ignore it with // nosemgrep: grpc-server-insecure-connection
Currently Semgrep CI fails because of the following error:
We should address this error either by fixing it or ignore it with
// nosemgrep: grpc-server-insecure-connection