All rules →
Rules / Go
SHIELD-GO-008

TLS InsecureSkipVerify enabled

highGoCWE-295CVSS 7.4

What it detects

Setting InsecureSkipVerify: true disables certificate validation, allowing MITM attacks.

How to fix

Never set InsecureSkipVerify to true in production. Fix the TLS certificate instead.

Scan your repo freeFull documentation
Back to all rules
SHIELD-GO-008: TLS InsecureSkipVerify enabled — Zennoxa Shield