go.lang.security.audit.net.use-tls.use-tls

Found an HTTP server without TLS. Use 'http.ListenAndServeTLS' instead. See https://golang.org/pkg/net/http/#ListenAndServeTLS for more information.

Fixed
github.com/l3montree-dev/devguard/cmd/devguard-scanner/sast
/builds/open-code/badgebackend/badge-api/pkg/api/server.go
  • T

    Tim Bastin detected go.lang.security.audit.net.use-tls.use-tls

  • T

    Tim Bastin fixed go.lang.security.audit.net.use-tls.use-tls

Reopen this vulnerability

You can reopen this vuln, if you plan to mitigate the risk now, or accepted this vuln by accident.

Rule Details

Found an HTTP server without TLS. Use 'http.ListenAndServeTLS' instead. See https://golang.org/pkg/net/http/#ListenAndServeTLS for more information.

Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 667098114b5ef45c7830e7aa599604fa65eb818f