CI: https://github.com/securego/gosec/issues/469

.github/workflows/go.yml

@@ -18,8 +18,9 @@ jobs:
       - name: go vet -v ./...
         run: go vet -v ./...
       - name: gosec ./...
-        uses: securego/gosec@master
-        with:
-          args: -exclude=G404 ./...
+        run: | # https://github.com/securego/gosec/issues/469
+          export PATH=$PATH:$(go env GOPATH)/bin
+          go install github.com/securego/gosec/v2/cmd/gosec@latest
+          gosec ./...
       - name: go build -v ./...
         run: go build -v ./...

heffalump/markov.go

@@ -95,6 +95,8 @@ func (mm MarkovMap) Get(w1, w2 string) string {
 		return ""
 	}
 
+	// We don't care about cryptographically sound entropy here, ignore gosec G404.
+	/* #nosec */
 	r := rand.Intn(len(suffix))
 	return suffix[r]
 }