{
"id": "go-shell-command",
"language": "go",
"group": "security",
"listingTitle": "Go shell command",
"title": "Avoid shell command strings",
"mvvm": false,
"defaultSeverity": "warn",
"legacyGroup": "security",
"why": "Shell -c introduces expansion and command-injection risk.",
"suggestion": "Invoke the target executable directly with separate arguments.",
"version": 3,
"semanticMaturity": "text",
"securityKind": "hotspot",
"taxonomy": [
"security"
],
"requirements": [
"sourceText"
],
"packs": [
"go"
],
"implementation": "src/languages/go/rules.rs",
"languages": [
"go"
],
"frameworks": [],
"languageVersions": [],
"limitations": []
}