feat: support path-based rule exclusions via exclude-rules

[ravisastryk]

Summary

Add path-based rule exclusions for excluding specific rules from specific paths. This will help large monorepos to apply different security rules to different components (e.g., CLI tools vs services).

Implements Issue: #1287

Changes:

• Add PathExcludeRule struct and PathExclusionFilter for path-based filtering
• Add ParseCLIExcludeRules for --exclude-rules CLI flag parsing
• Add GetExcludeRules method to Config for JSON config support

Configuration example:

{
  "exclude-rules": [
    {"path": "cmd/.*", "rules": ["G204", "G304"]},
    {"path": "scripts/.*", "rules": ["*"]}
  ]
}

CLI example:

gosec --exclude-rules="cmd/.*:G204,G304" ./...

Tests
Ran all tests

make test

Unit tests

go test -v ./... -run TestShouldExclude
go test -v ./... -run PathExclusionFilter

Manual test

go build -o gosec ./cmd/gosec
./gosec --exclude-rules=\"cmd/.*:G204\" ./...

[ravisastryk]

@ccojocar @dannyc-grafana, When you get a chance, can you please review my PR? TIA

[ccojocar]

LGTM, please could you fix the lint warning?

[ravisastryk]

LGTM, please could you fix the lint warning?

@ccojocar Thank you for taking your time and reviewing. I have fixed the formatting issue. Everything should be good now.
@gcmurphy Can you please take a look when you get a chance?

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 62.40602% with 50 lines in your changes missing coverage. Please review.
✅ Project coverage is 68.86%. Comparing base (1216c9b) to head (a943c54).
⚠️ Report is 165 commits behind head on master.

Files with missing lines	Patch %	Lines
config.go	0.00%	17 Missing ⚠️
path_filter.go	83.00%	15 Missing and 2 partials ⚠️
cmd/gosec/main.go	0.00%	16 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1465      +/-   ##
==========================================
+ Coverage   68.49%   68.86%   +0.36%     
==========================================
  Files          75       82       +7     
  Lines        4384     6404    +2020     
==========================================
+ Hits         3003     4410    +1407     
- Misses       1233     1775     +542     
- Partials      148      219      +71     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.