claude-code/.claude/rules/golang/security.md

paths
**/*.go **/go.mod **/go.sum

Go Security

This file extends common/security.md with Go specific content.

Secret Management

apiKey := os.Getenv("OPENAI_API_KEY")
if apiKey == "" {
    log.Fatal("OPENAI_API_KEY not configured")
}

Security Scanning

• Use gosec for static security analysis:

  gosec ./...
  

Context & Timeouts

Always use context.Context for timeout control:

ctx, cancel := context.WithTimeout(ctx, 5*time.Second)
defer cancel()