From 34128fcb19753e2b7327526fbd5e4d210c9e4f4c Mon Sep 17 00:00:00 2001 From: Diogenesoftoronto Date: Fri, 13 Oct 2023 18:04:37 -0400 Subject: [PATCH] more sec stuff --- internal/workflow/activities/bundle.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/internal/workflow/activities/bundle.go b/internal/workflow/activities/bundle.go index b55f933e9..6eb34aa24 100644 --- a/internal/workflow/activities/bundle.go +++ b/internal/workflow/activities/bundle.go @@ -269,10 +269,12 @@ func unbag(path string) error { // Create metadata and submissionDocumentation directories. metadataPath, _ := securejoin.SecureJoin(path, "metadata") documentationPath, _ := securejoin.SecureJoin(metadataPath, "submissionDocumentation") - if err := os.MkdirAll(metadataPath, 0o775); err != nil { //#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used. + //#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used. + if err := os.MkdirAll(metadataPath, 0o775); err != nil { return err } - if err := os.MkdirAll(documentationPath, 0o775); err != nil { //#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used. + //#nosec G301 -- Evaluate use of UID and GID among containers so that permission 750 could be used. + if err := os.MkdirAll(documentationPath, 0o775); err != nil { return err }