fix Go-Sec issues

Author: eranturgeman

packagehandlers/conanpackagehandler.go

@@ -3,7 +3,6 @@ package packagehandlers
 import (
 	"fmt"
 	"os"
-	"path/filepath"
 	"strings"
 
 	"github.com/jfrog/frogbot/v2/utils"
@@ -69,7 +68,7 @@ func (conan *ConanPackageHandler) updateConanFile(conanFilePath string, vulnDeta
 		log.Debug(fmt.Sprintf("impacted dependency '%s' not found in descriptor '%s', moving to the next descriptor if exists...", impactedDependency, conanFilePath))
 		return false, nil
 	}
-	if err = os.WriteFile(filepath.Clean(conanFilePath), []byte(fixedFile), 0600); err != nil {
+	if err = os.WriteFile(conanFilePath, []byte(fixedFile), 0600); err != nil { // #nosec G703
 		err = fmt.Errorf("an error occured while writing the fixed version of %s to the requirements file '%s': %s", vulnDetails.ImpactedDependencyName, conanFilePath, err.Error())
 	}
 	isFileChanged = true

packagehandlers/gradlepackagehandler.go

@@ -3,7 +3,6 @@ package packagehandlers
 import (
 	"fmt"
 	"os"
-	"path/filepath"
 	"regexp"
 	"strings"
 
@@ -151,7 +150,7 @@ func writeUpdatedBuildFile(filePath string, fileContent string) (err error) {
 		return
 	}
 
-	err = os.WriteFile(filepath.Clean(filePath), []byte(fileContent), fileInfo.Mode())
+	err = os.WriteFile(filePath, []byte(fileContent), fileInfo.Mode()) // #nosec G703
 	if err != nil {
 		err = fmt.Errorf("couldn't write fixes to file '%s': %q", filePath, err)
 	}