Use stricter file permissions

Signed-off-by: Thomas Stromberg <[email protected]>

Author: tstromberg

lint-install.go

@@ -128,7 +128,7 @@ func updateMakefile(root string, cfg Config, dryRun bool) (string, error) {
 	edits := myers.ComputeEdits("Makefile", string(existing), string(proposed))
 	change := gotextdiff.ToUnified(filepath.Base(dest), filepath.Base(dest), string(existing), edits)
 	if !dryRun {
-		if err := os.WriteFile(dest, proposed, 0o755); err != nil {
+		if err := os.WriteFile(dest, proposed, 0o600); err != nil {
 			return "", err
 		}
 	}
@@ -154,7 +154,7 @@ func updateGoLint(root string, dryRun bool) (string, error) {
 	change := gotextdiff.ToUnified(filepath.Base(dest), filepath.Base(dest), string(existing), edits)
 
 	if !dryRun {
-		if err := os.WriteFile(dest, goLintConfig, 0o755); err != nil {
+		if err := os.WriteFile(dest, goLintConfig, 0o600); err != nil {
 			return "", err
 		}
 	}