canonicalheader 8→0 + usestdlibvars 3→0：header key 改为 Go 规范大小写（wire 格式本就如此，纯代码修正）、HTTP 方法常量替代字符串字面量。

Result: {"status":"keep","total_issues":45,"golint_canonicalheader":0,"golint_errname":1,"golint_errorlint":12,"golint_forcetypeassert":3,"golint_gosec":0,"golint_intrange":3,"golint_modernize":5,"golint_nilnil":3,"golint_perfsprint":0,"golint_prealloc":3,"golint_recvcheck":7,"golint_usestdlibvars":0,"golint_wastedassign":7,"golint_total":44,"eslint_problems":1,"eslint_errors":0,"eslint_warnings":1,"tsc_errors":0,"measure_s":38}

internal/apps/admin/updater/logics.go

@@ -194,7 +194,7 @@ func (m *manager) fetchRelease(ctx context.Context, repository string) (githubRe
 	}
 	req.Header.Set("Accept", "application/vnd.github+json")
 	req.Header.Set("User-Agent", "OpenFlare-Updater")
-	req.Header.Set("X-GitHub-Api-Version", "2022-11-28")
+	req.Header.Set("X-Github-Api-Version", "2022-11-28")
 
 	resp, err := m.client.Do(req)
 	if err != nil {

internal/apps/agent/observability/openresty_local.go

@@ -62,7 +62,7 @@ func CollectEdgeHealth(ctx context.Context, cfg *config.Config) *EdgeHealthSnaps
 }
 
 func fetchLocalJSON(ctx context.Context, client *http.Client, url string, target any) error {
-	req, err := http.NewRequestWithContext(ctx, "GET", url, nil)
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
 	if err != nil {
 		return err
 	}

internal/apps/openflare/waf/ip_group_sync.go

@@ -403,7 +403,7 @@ func downloadIPGroupSubscription(ctx context.Context, rawURL string) ([]byte, er
 		return nil, err
 	}
 	client := http.Client{Timeout: 15 * time.Second}
-	req, err := http.NewRequestWithContext(ctx, "GET", rawURL, nil)
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, rawURL, nil)
 	if err != nil {
 		return nil, fmt.Errorf("下载订阅失败: %w", err)
 	}

internal/integration/githubrelease/client.go

@@ -338,7 +338,7 @@ func (client *Client) Resolve(ctx context.Context, request ResolveRequest) (Reso
 	return ResolveResult{}, safeError(
 		errAssetMissing,
 		response.StatusCode,
-		response.Header.Get("X-GitHub-Request-Id"),
+		response.Header.Get("X-Github-Request-Id"),
 		repository,
 		release.Tag,
 		request.AssetName,
@@ -379,7 +379,7 @@ func (client *Client) Download(ctx context.Context, request DownloadRequest) (*D
 
 	result, err := client.streamAsset(response.Body, request.MaxBytes, request.Asset.Digest)
 	if err != nil {
-		return nil, safeError(err, response.StatusCode, response.Header.Get("X-GitHub-Request-Id"), repository, "", request.Asset.Name, nil, retryAt)
+		return nil, safeError(err, response.StatusCode, response.Header.Get("X-Github-Request-Id"), repository, "", request.Asset.Name, nil, retryAt)
 	}
 	return result, nil
 }
@@ -682,7 +682,7 @@ func safeHTTPError(kind error, response *http.Response, repository string, tag s
 	return safeError(
 		kind,
 		response.StatusCode,
-		response.Header.Get("X-GitHub-Request-Id"),
+		response.Header.Get("X-Github-Request-Id"),
 		repository,
 		tag,
 		assetName,

internal/integration/githubrelease/transport.go

@@ -148,7 +148,7 @@ func newClient(options clientOptions) *Client {
 func applyMetadataHeaders(request *http.Request, etag string) {
 	request.Header.Set("Accept", metadataAccept)
 	request.Header.Set("User-Agent", defaultUserAgent)
-	request.Header.Set("X-GitHub-Api-Version", APIVersion)
+	request.Header.Set("X-Github-Api-Version", APIVersion)
 	if etag = safeETag(etag); etag != "" {
 		request.Header.Set("If-None-Match", etag)
 	}
@@ -158,7 +158,7 @@ func applyAssetHeaders(request *http.Request) {
 	request.Header.Set("Accept", assetAccept)
 	request.Header.Set("Accept-Encoding", "identity")
 	request.Header.Set("User-Agent", defaultUserAgent)
-	request.Header.Set("X-GitHub-Api-Version", APIVersion)
+	request.Header.Set("X-Github-Api-Version", APIVersion)
 }
 
 func stripCrossHostHeaders(request *http.Request) {
@@ -300,10 +300,10 @@ func responseRetryAt(response *http.Response, now time.Time) *time.Time {
 			return &retryAt
 		}
 	}
-	if strings.TrimSpace(response.Header.Get("X-RateLimit-Remaining")) != "0" {
+	if strings.TrimSpace(response.Header.Get("X-Ratelimit-Remaining")) != "0" {
 		return nil
 	}
-	reset, err := strconv.ParseInt(strings.TrimSpace(response.Header.Get("X-RateLimit-Reset")), 10, 64)
+	reset, err := strconv.ParseInt(strings.TrimSpace(response.Header.Get("X-Ratelimit-Reset")), 10, 64)
 	if err != nil || reset <= 0 {
 		return nil
 	}

internal/router/middlewares.go

@@ -109,7 +109,7 @@ func corsMiddleware() gin.HandlerFunc {
 			c.Writer.Header().Set("Access-Control-Allow-Methods", "POST, OPTIONS, GET, PUT, DELETE, PATCH")
 		}
 
-		if c.Request.Method == "OPTIONS" {
+		if c.Request.Method == http.MethodOptions {
 			c.AbortWithStatus(http.StatusNoContent)
 			return
 		}