nosec gosec

Signed-off-by: Dale Haiducek <[email protected]>

Author: dhaiducek

cmd/main.go

@@ -61,6 +61,7 @@ func processGeneratorConfig(filePath string) []byte {
 
 	p := internal.Plugin{}
 
+	// #nosec G304
 	fileData, err := ioutil.ReadFile(filePath)
 	if err != nil {
 		errorAndExit("failed to read file '%s': %s", filePath, err)

internal/patches.go

@@ -89,8 +89,8 @@ func (m *manifestPatcher) Validate() error {
 	namespace, _, _ := unstructured.NestedString(manifest, "metadata", "namespace")
 
 	// Apply defaults on the patches
-	for _, patch := range m.patches {
-		err := setPatchDefaults(apiVersion, kind, name, namespace, &patch)
+	for i := range m.patches {
+		err := setPatchDefaults(apiVersion, kind, name, namespace, &m.patches[i])
 		if err != nil {
 			return err
 		}

internal/utils.go

@@ -318,6 +318,7 @@ func handleExpanders(
 // If the file cannot be decoded or each document is not a map, an error will
 // be returned.
 func unmarshalManifestFile(manifestPath string) (*[]map[string]interface{}, error) {
+	// #nosec G304
 	manifestBytes, err := ioutil.ReadFile(manifestPath)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read the manifest file %s", manifestPath)