linked-against-go-static-asset-library.yml

rule:
  meta:
    name: linked against Go static asset library
    namespace: executable/resource
    authors:
      - joakim@intezer.com
    description: Detects if the Go file includes an static assets.
    scope: file
    references:
      - https://github.com/rakyll/statik
      - https://github.com/gobuffalo/packr
      - https://github.com/gobuffalo/packr
      - https://github.com/GeertJohan/go.rice
      - https://github.com/kevinburke/go-bindata
      - https://github.com/lu4p/binclude
      - https://github.com/lu4p/binclude
      - https://github.com/omeid/go-resources
      - https://github.com/pyros2097/go-embed
  features:
    - and:
      - match: compiled with Go
      - or:
        - or:
          - string: "github.com/rakyll/statik/fs.IsDefaultNamespace"
          - string: "github.com/rakyll/statik/fs.RegisterWithNamespace"
          - string: "github.com/rakyll/statik/fs.NewWithNamespace"
          - string: "github.com/rakyll/statik/fs.Register"
        - and:
          - string: "github.com/gobuffalo/packr.NewBox"
        - or:
          - string: "github.com/markbates/pkger.Open"
          - string: "github.com/markbates/pkger.Include"
          - string: "github.com/markbates/pkger.Parse"
        - or:
          - string: "github.com/GeertJohan/go.rice.FindBox"
          - string: "github.com/GeertJohan/go.rice.MustFindBox"
        - and:
          - substring: "/bindata.go"
            description: go-bindata
          - substring: ".Asset"
        - and:
          - string: "github.com/lu4p/binclude.Include"
        - and:
          - string: "github.com/omeid/go-resources"
        - and:
          - string: "github.com/pyros2097/go-embed"