[lint-monster] LintMonster: add bounds checks for indexed access (1,745 findings) #66759

Daily custom lint findings

The 2026-10-08 make golint-custom pre-check reported 1,745 direct indexing findings: 1,506 slice accesses and 239 string accesses. The largest affected paths are pkg/cli (678), pkg/workflow (586), pkg/parser (239), and pkg/linters (162); additional findings occur in pkg/stringutil and smaller packages.

Representative diagnostic: direct slice or string indexing without a dominating bounds check.

Remediation checklist

• Inspect each flagged access and add a narrow bounds check when the index can be out of range; preserve existing behavior for valid inputs.
• For statically constrained indices, make the constraint clear to the analyzer with the smallest local change.
• Keep changes limited to this finding group and avoid suppressing the analyzer.
• Run make golint-custom and confirm this group is cleared.

Source: lint run §37719656581.

Generated by 🧌 LintMonster · codex · gpt60 · 175.2 AIC · ⌖ 28.6 AIC · ⊞ 15.5K · ◷

• expires on Oct 14, 2026, 6:56 PM UTC-08:00