Fortify: Insecure Randomness

foo.go

func NewPusher(host string, isSkipVerify bool) *Pusher {
	tr := &http.Transport{
		TLSClientConfig: &tls.Config{
			InsecureSkipVerify: isSkipVerify,
			PreferServerCipherSuites: true,
		}, // cause Insecure Randomness
		MaxIdleConnsPerHost: 100,
		MaxConnsPerHost:     100,
		IdleConnTimeout:     60 * time.Second,
	}

	client := &http.Client{Transport: tr}

	return &Pusher{
		host:         host,
		client:       client,
		isSkipVerify: isSkipVerify,
	}
}