Description
Kubeconfig files in pkg/scenarioorchestrator/utils/utils.go (line 108) are written with 0644 permissions, making them world-readable. These files contain sensitive credentials.
Location: pkg/scenarioorchestrator/utils/utils.go:108
err = os.WriteFile(path, flattenedConfig, 0644)
Expected behavior
Kubeconfig files should be written with 0600 (owner read/write only):
err = os.WriteFile(path, flattenedConfig, 0600)
Description
Kubeconfig files in
pkg/scenarioorchestrator/utils/utils.go(line 108) are written with0644permissions, making them world-readable. These files contain sensitive credentials.Location:
pkg/scenarioorchestrator/utils/utils.go:108Expected behavior
Kubeconfig files should be written with
0600(owner read/write only):