From 23fcafe9deaea5f1b0586827b606989aaf2dc731 Mon Sep 17 00:00:00 2001 From: Rodrigo Bernardi Date: Thu, 16 Jul 2026 11:08:48 -0300 Subject: [PATCH] fix(gosec): use 0750 instead of 0755 for MkdirAll (G301) gosec G301 expects directory permissions 0750 or less. The //nolint:gosec directive only works for golangci-lint, not for the standalone gosec Security Scan CI job. --- internal/adapters/primary/cli/new.go | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/internal/adapters/primary/cli/new.go b/internal/adapters/primary/cli/new.go index 3dd96ed..0621a18 100644 --- a/internal/adapters/primary/cli/new.go +++ b/internal/adapters/primary/cli/new.go @@ -195,12 +195,10 @@ func doCreateProject(name string, pType string, quiet bool) { // Create directories srcDir := filepath.Join(projectDir, "src") testsDir := filepath.Join(projectDir, "tests") - //nolint:gosec // Standard directory permissions - if err := os.MkdirAll(srcDir, 0755); err != nil { + if err := os.MkdirAll(srcDir, 0750); err != nil { msg.Die("❌ Failed to create src directory: %v", err) } - //nolint:gosec // Standard directory permissions - if err := os.MkdirAll(testsDir, 0755); err != nil { + if err := os.MkdirAll(testsDir, 0750); err != nil { msg.Die("❌ Failed to create tests directory: %v", err) }