everything-claude-code/.cursor/rules/golang-security.md

description, globs, alwaysApply

description	globs	alwaysApply
Go security: environment variable secrets, gosec static analysis, context timeouts	**/*.go	false

Go Security

This file extends common/security.md with Go specific content.

Secret Management

apiKey := os.Getenv("OPENAI_API_KEY")
if apiKey == "" {
    log.Fatal("OPENAI_API_KEY not configured")
}

Security Scanning

• Use gosec for static security analysis:

  gosec ./...
  

Context & Timeouts

Always use context.Context for timeout control:

ctx, cancel := context.WithTimeout(ctx, 5*time.Second)
defer cancel()