more sec stuff

artefactual-sdps · Oct 13, 2023 · 34128fc · 34128fc
1 parent d4700fb
commit 34128fc
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/internal/workflow/activities/bundle.go b/internal/workflow/activities/bundle.go
@@ -269,10 +269,12 @@ func unbag(path string) error {
 	// Create metadata and submissionDocumentation directories.
 	metadataPath, _ := securejoin.SecureJoin(path, "metadata")
 	documentationPath, _ := securejoin.SecureJoin(metadataPath, "submissionDocumentation")
-	if err := os.MkdirAll(metadataPath, 0o775); err != nil { //#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used.
+	//#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used.
+	if err := os.MkdirAll(metadataPath, 0o775); err != nil {
 		return err
 	}
-	if err := os.MkdirAll(documentationPath, 0o775); err != nil { //#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used.
+	//#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used.
+	if err := os.MkdirAll(documentationPath, 0o775); err != nil {
 		return err
 	}