fix(cmd): staticcheck QF1012

[AtomicFS]

No description provided.

[github-actions]

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	15		0	0	0.54s
✅ BASH	bash-exec	10		0	0	0.02s
✅ BASH	shellcheck	9		0	0	0.09s
✅ BASH	shfmt	9		0	0	0.0s
✅ DOCKERFILE	hadolint	5		0	0	0.33s
✅ EDITORCONFIG	editorconfig-checker	227		0	0	0.23s
✅ GO	revive	31		0	0	33.44s
✅ JSON	jsonlint	14		0	0	2.28s
✅ JSON	prettier	14		0	0	1.86s
✅ JSON	v8r	14		0	0	4.8s
✅ MARKDOWN	markdownlint	32		0	0	3.77s
✅ PYTHON	black	20		0	0	1.63s
✅ PYTHON	flake8	20		0	0	0.71s
✅ PYTHON	isort	20		0	0	0.24s
✅ PYTHON	mypy	20		0	0	9.46s
✅ PYTHON	pylint	20		0	0	10.12s
✅ PYTHON	pyright	20		0	0	0.91s
✅ PYTHON	ruff	20		0	0	0.02s
✅ REPOSITORY	checkov	yes		no	no	26.74s
✅ REPOSITORY	gitleaks	yes		no	no	5.66s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	75.01s
✅ REPOSITORY	secretlint	yes		no	no	1.37s
✅ REPOSITORY	syft	yes		no	no	15.64s
❌ REPOSITORY	trivy	yes		1	no	16.91s
✅ REPOSITORY	trivy-sbom	yes		no	no	6.52s
✅ REPOSITORY	trufflehog	yes		no	no	7.68s
✅ SPELL	cspell	227		0	0	5.4s
⚠️ YAML	prettier	35		1	2	7.17s
✅ YAML	v8r	35		0	0	12.21s
✅ YAML	yamllint	35		0	0	2.75s

Detailed Issues

❌ REPOSITORY / trivy - 1 error

2026-02-26T09:02:07Z	INFO	Loaded	file_path=".trivy.yaml"
2026-02-26T09:02:07Z	INFO	[vulndb] Need to update DB
2026-02-26T09:02:07Z	INFO	[vulndb] Downloading vulnerability DB...
2026-02-26T09:02:07Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
11.00 MiB / 86.40 MiB [------->_____________________________________________________] 12.73% ? p/s ?27.09 MiB / 86.40 MiB [------------------->_________________________________________] 31.35% ? p/s ?47.19 MiB / 86.40 MiB [--------------------------------->___________________________] 54.62% ? p/s ?74.16 MiB / 86.40 MiB [---------------------------------------->______] 85.83% 106.03 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [--------------------------------------------->] 100.00% 106.03 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [--------------------------------------------->] 100.00% 106.03 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [--------------------------------------------->] 100.00% 100.50 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [--------------------------------------------->] 100.00% 100.50 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [--------------------------------------------->] 100.00% 100.50 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 94.02 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 94.02 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 94.02 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 87.95 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 87.95 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 87.95 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 82.28 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 82.28 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 82.28 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 76.97 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 76.97 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 76.97 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 72.00 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 72.00 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 72.00 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 67.36 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 67.36 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 67.36 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 63.01 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 63.01 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 63.01 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 58.95 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 58.95 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 58.95 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 55.14 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 55.14 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 55.14 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [---------------------------------------------->] 100.00% 51.59 MiB p/s ETA 0s86.40 MiB / 86.40 MiB [-------------------------------------------------] 100.00% 11.71 MiB p/s 7.6s2026-02-26T09:02:16Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-02-26T09:02:16Z	INFO	[vuln] Vulnerability scanning is enabled
2026-02-26T09:02:16Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-02-26T09:02:16Z	INFO	[misconfig] Need to update the checks bundle
2026-02-26T09:02:16Z	INFO	[misconfig] Downloading the checks bundle...
165.46 KiB / 165.46 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-02-26T09:02:22Z	INFO	Number of language-specific files	num=1
2026-02-26T09:02:22Z	INFO	[gomod] Detecting vulnerabilities...
2026-02-26T09:02:22Z	INFO	Detected config files	num=5

Report Summary

┌────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│           Target           │    Type    │ Vulnerabilities │ Misconfigurations │
├────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ cmd/firmware-action/go.mod │   gomod    │        1        │         -         │
├────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/coreboot/Dockerfile │ dockerfile │        -        │         0         │
├────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/edk2/Dockerfile     │ dockerfile │        -        │         0         │
├────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/linux/Dockerfile    │ dockerfile │        -        │         0         │
├────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/uboot/Dockerfile    │ dockerfile │        -        │         0         │
├────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/uroot/Dockerfile    │ dockerfile │        -        │         0         │
└────────────────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.68/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


cmd/firmware-action/go.mod (gomod)
==================================
Total: 1 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌─────────────────────────────┬───────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│           Library           │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                             │
├─────────────────────────────┼───────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ github.com/cloudflare/circl │ CVE-2026-1229 │ LOW      │ fixed  │ v1.6.1            │ 1.6.3         │ CIRCL has an incorrect calculation in secp384r1 CombinedMult │
│                             │               │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-1229                    │
└─────────────────────────────┴───────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.69.1 of Trivy is now available, current version is 0.68.2

To suppress version checks, run Trivy scans with the --skip-version-check flag

⚠️ YAML / prettier - 1 error

Checking formatting...
[warn] .github/workflows/go-test.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.3.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,DOCKERFILE_HADOLINT,EDITORCONFIG_EDITORCONFIG_CHECKER,GO_REVIVE,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.22%. Comparing base (341ea82) to head (5e63ee8).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #852   +/-   ##
=======================================
  Coverage   53.22%   53.22%           
=======================================
  Files          17       17           
  Lines        1997     1997           
=======================================
  Hits         1063     1063           
  Misses        841      841           
  Partials       93       93           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.