sneak 11e9206c21 fix: suppress gosec G703 false positive on state_dir probe removal ...

The pinned CI linter (golangci-lint v2.10.1) flags os.Remove(probePath)
in ensureStateDirWritable as G703 path traversal via taint analysis.
probePath comes from os.CreateTemp inside the StateDir that the probe
just validated, so the taint finding is a false positive; suppress it
with a justified nolint comment matching the existing precedent in
loadConfigFile. Verified against the pinned linter version via the
Dockerfile lint stage (0 issues).

2026-08-07 17:00:20 +00:00

14 KiB

Raw Blame History

View Raw