http.NewRequest request send to http:// URLs GO-S1028Does not encrypt traffic with TLS, use HTTPS instead: http://metadata.google.internal/computeMetadata/v1/instance/machine-type
11)
12
13func (p *Provider) Heartbeat() (map[string]interface{}, error) {
14 req, err := http.NewRequest("GET", "http://metadata.google.internal/computeMetadata/v1/instance/machine-type", nil)15 if err != nil {
16 return nil, err
17 }
Description
Requests sent via http.NewRequest to http:// URLs is dangerous because the
server is attempting to connect to a website that does not encrypt traffic with
TLS. Instead, it is recommended to use https://.
Bad practice
req, err := http.NewRequest("GET", "http://deepsource.io", nil)
Recommended
req, err := http.NewRequest("GET", "https://deepsource.io", nil)