Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-19 09:40:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(agentcompat): document intentional scanner findings

Browse Source 
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
This commit is contained in:
naiba
2026-07-20 17:07:04 +00:00
co-authored by naiba/CloudCode
parent 0332b1e212
commit 926f2ca632
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integration/agentcompat/cmd/agentcompat/metadata_writer.go
+1 -1
View File
@@ -27,7 +27,7 @@ func writeMetadata(ctx context.Context, config cliConfig, now time.Time) error {
if err := os.MkdirAll(resultsDir, 0o700); err != nil { if err := os.MkdirAll(resultsDir, 0o700); err != nil {
return fmt.Errorf("create results directory: %w", err) return fmt.Errorf("create results directory: %w", err)
} }
if err := os.Chmod(resultsDir, 0o700); err != nil { if err := os.Chmod(resultsDir, 0o700); err != nil { // #nosec G302 -- 0700 is the required private directory mode; artifacts are written 0600.
return fmt.Errorf("secure results directory: %w", err) return fmt.Errorf("secure results directory: %w", err)
} }
if err := prepareResultsDir(resultsDir); err != nil { if err := prepareResultsDir(resultsDir); err != nil {
integration/agentcompat/internal/workflowpolicy/types.go
+1 -1
View File
@@ -25,7 +25,7 @@ const (
RuleRepositoryNotAllowed Rule = "repository-not-allowed" RuleRepositoryNotAllowed Rule = "repository-not-allowed"
RuleRepositoryNotLiteral Rule = "repository-not-literal" RuleRepositoryNotLiteral Rule = "repository-not-literal"
RuleOtherRepositoryRef Rule = "other-repository-ref" RuleOtherRepositoryRef Rule = "other-repository-ref"
RulePersistCredentials Rule = "persist-credentials" RulePersistCredentials Rule = "persist-credentials" // #nosec G101 -- GitHub Actions configuration key, not a credential.
RuleReusableExecutable Rule = "reusable-executable" RuleReusableExecutable Rule = "reusable-executable"
RuleContinueOnError Rule = "continue-on-error" RuleContinueOnError Rule = "continue-on-error"
RuleSwallowedFailure Rule = "swallowed-failure" RuleSwallowedFailure Rule = "swallowed-failure"