From 566980d1e22f8c914796f0d62a20bbed3e20ce6b Mon Sep 17 00:00:00 2001 From: Kyren223 Date: Thu, 9 Jan 2025 15:09:44 +0200 Subject: Fixed gosec issues --- internal/client/gateway/gateway.go | 5 ++++- internal/server/server.go | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/internal/client/gateway/gateway.go b/internal/client/gateway/gateway.go index 04513de..99fccf5 100644 --- a/internal/client/gateway/gateway.go +++ b/internal/client/gateway/gateway.go @@ -48,7 +48,10 @@ func init() { RootCAs: certPool, ServerName: config.Read().ServerName, MinVersion: tls.VersionTLS12, - InsecureSkipVerify: config.Read().InsecureSkipServerVerification, + // This is fine, it's always false by default + // The user may change the config, the name should be clear enough + // that this is insecure (valid use cases are for testing purposes) + InsecureSkipVerify: config.Read().InsecureSkipServerVerification, //#nosec 402 } } diff --git a/internal/server/server.go b/internal/server/server.go index e2b2a40..9d52660 100644 --- a/internal/server/server.go +++ b/internal/server/server.go @@ -34,7 +34,7 @@ func init() { if !ok { path = "certs/server.key" } - keyPEM, err := os.ReadFile(path) + keyPEM, err := os.ReadFile(path) //#nosec 304 if err != nil { log.Fatalln("failed to read certificate key from", path) } -- cgit v1.3.1