Fixed gosec issues

2 files changed, 5 insertions, 2 deletions

diff --git a/internal/client/gateway/gateway.go b/internal/client/gateway/gateway.go
index 04513de..99fccf5 100644
--- a/internal/client/gateway/gateway.go
+++ b/internal/client/gateway/gateway.go
@@ -48,7 +48,10 @@ func init() {
 		RootCAs:            certPool,
 		ServerName:         config.Read().ServerName,
 		MinVersion:         tls.VersionTLS12,
-		InsecureSkipVerify: config.Read().InsecureSkipServerVerification,
+		// This is fine, it's always false by default
+		// The user may change the config, the name should be clear enough
+		// that this is insecure (valid use cases are for testing purposes)
+		InsecureSkipVerify: config.Read().InsecureSkipServerVerification, //#nosec 402
 	}
 }
 
diff --git a/internal/server/server.go b/internal/server/server.go
index e2b2a40..9d52660 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -34,7 +34,7 @@ func init() {
 	if !ok {
 		path = "certs/server.key"
 	}
-	keyPEM, err := os.ReadFile(path)
+	keyPEM, err := os.ReadFile(path) //#nosec 304
 	if err != nil {
 		log.Fatalln("failed to read certificate key from", path)
 	}