Fix gosec warnings: tighten file permissions and add exclusions (bd-b47c034e)

2025-11-02 15:38:55 -08:00
parent 334ef713b7
commit 94fc772139
5 changed files with 13 additions and 8 deletions
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -38,6 +38,11 @@ linters:
        linters:
          - gosec
        text: "G304"
+      # G306: File permissions 0644 in tests are acceptable (test fixtures)
+      - path: '_test\.go'
+        linters:
+          - gosec
+        text: "G306"
      # G304: Safe file reads from known JSONL and error paths
      - path: 'cmd/bd/autoflush\.go|internal/daemon/discovery\.go|internal/daemonrunner/sync\.go'
        linters: