diff --git a/server/server.go b/server/server.go index e8f6efb..101ce97 100644 --- a/server/server.go +++ b/server/server.go @@ -82,6 +82,8 @@ func (s Server) createTLSServer(router http.Handler) *http.Server { } caCertPool := x509.NewCertPool() caCertPool.AppendCertsFromPEM(caCert) + // disable "G402 (CWE-295): TLS MinVersion too low. (Confidence: HIGH, Severity: HIGH)" + // #nosec G402 tlsConfig := &tls.Config{ ClientCAs: caCertPool, ClientAuth: tls.RequireAndVerifyClientCert,