Module InsecureRandomness

Provides a taint-tracking configuration for reasoning about random values that are not cryptographically secure.

Import path

import semmle.go.security.InsecureRandomness

Imports

Provides default sources, sinks and sanitizers for reasoning about random values that are not cryptographically secure, as well as extension points for adding your own.

Predicates

isSinkWithKind

Holds if sink is a sink for this configuration with kind kind.

Classes

Configuration

DEPRECATED: Use Flow instead.

Aliases

Flow	Tracks taint flow from randomly generated values which are not cryptographically secure to cryptographic applications.