diff --git a/rules/readfile.go b/rules/readfile.go
index <HASH>..<HASH> 100644
--- a/rules/readfile.go
+++ b/rules/readfile.go
@@ -122,6 +122,7 @@ func NewReadFile(id string, conf gosec.Config) (gosec.Rule, []ast.Node) {
 	rule.clean.Add("path/filepath", "Clean")
 	rule.clean.Add("path/filepath", "Rel")
 	rule.Add("io/ioutil", "ReadFile")
+	rule.Add("os", "ReadFile")
 	rule.Add("os", "Open")
 	rule.Add("os", "OpenFile")
 	return rule, []ast.Node{(*ast.CallExpr)(nil)}
diff --git a/testutils/source.go b/testutils/source.go
index <HASH>..<HASH> 100644
--- a/testutils/source.go
+++ b/testutils/source.go
@@ -1788,6 +1788,22 @@ func main() {
 package main
 
 import (
+"os"
+"log"
+)
+
+func main() {
+	f := os.Getenv("tainted_file")
+	body, err := os.ReadFile(f)
+	if err != nil {
+	log.Printf("Error: %v\n", err)
+	}
+	log.Print(body)
+
+}`}, 1, gosec.NewConfig()}, {[]string{`
+package main
+
+import (
 	"fmt"
 	"log"
 	"net/http"
feat: add os.ReadFile to G<I> (#<I>)

In Go <I> or higher, the `io/ioutil` has been deprecated and the

`ioutil.ReadFile` function now calls `os.ReadFile`.