GOSEC Junit contains all issues in the project. Use // #nosec on top of reported line to mark issue as false positive.