Merge branch 'correct-blackduck-sca-action' of https://github.com/open-component-model/ocm-controller into correct-blackduck-sca-action

On-behalf-of: Gerald Morrison (SAP) <[email protected]>
Signed-off-by: Gerald Morrison (SAP) <[email protected]>

Author: morrison-sap

.github/PULL_REQUEST_TEMPLATE.md

@@ -2,7 +2,7 @@ package v1alpha1
 
 const (
 	// DefaultRegistryCertificateSecretName is the name of the of certificate secret for client and registry.
-	DefaultRegistryCertificateSecretName = "ocm-registry-tls-certs" // #nosec G101 -- not a credential
+	DefaultRegistryCertificateSecretName = "ocm-registry-tls-certs" //nolint:gosec // not a credential
 )
 
 // Internal ExtraIdentity keys.
@@ -35,5 +35,5 @@ const (
 // Ocm credential config key for secrets.
 const (
 	// OCMCredentialConfigKey defines the secret key to look for in case a user provides an ocm credential config.
-	OCMCredentialConfigKey = ".ocmcredentialconfig" // #nosec G101 -- not a credential
+	OCMCredentialConfigKey = ".ocmcredentialconfig" //nolint:gosec // not a credential
 )

.github/workflows/code-scan.yml

@@ -143,7 +143,7 @@ func (c *Client) setupCertificates(ctx context.Context) error {
 }
 
 func (c *Client) constructTLSRoundTripper() http.RoundTripper {
-	tlsConfig := &tls.Config{} // #nosec G402 -- must provide lower version for quay.io
+	tlsConfig := &tls.Config{} //nolint:gosec // must provide lower version for quay.io
 	caCertPool := x509.NewCertPool()
 	caCertPool.AppendCertsFromPEM(c.ca)