crypto/tls package. Config.InsecureSkipVerify = true disables certificate verification — a finding for all production code.
.Dial().Dial()SinkDial(network, addr string, config *Config) (*Conn, error)
Creates TLS connection. Finding when config.InsecureSkipVerify is true.
2| FQN | Field | |
|---|---|---|
| crypto/tls | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
// standard library — no go.mod entry required
from codepathfinder.go_rule import GoNetTLS