Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG]: Gosec for PowerMax is reporting failure #170

Closed
shanmydell opened this issue Jan 31, 2022 · 0 comments
Closed

[BUG]: Gosec for PowerMax is reporting failure #170

shanmydell opened this issue Jan 31, 2022 · 0 comments
Assignees
Labels
area/csi-powermax Issue pertains to the CSI Driver for Dell EMC PowerMax type/bug Something isn't working. This is the default label associated with a bug issue.
Milestone

Comments

@shanmydell
Copy link
Collaborator

Bug Description

Gosec for PowerMax is reporting failure

Logs

[/github/workspace/core/semver/semver.go:87] - G304 (CWE-22): Potential file inclusion via variable (Confidence: HIGH, Severity: MEDIUM)
86: if len(output) > 0 {

87: fout, err := os.Create(output)
88: if err != nil {

Screenshots

No response

Additional Environment Information

No response

Steps to Reproduce

Run gosec against csi powermax

Expected Behavior

gosec should run without any issues

CSM Driver(s)

CSI Driver for PowerMax 2.1

Installation Type

No response

Container Storage Modules Enabled

No response

Container Orchestrator

NA

Operating System

ubuntu latest

@shanmydell shanmydell added type/bug Something isn't working. This is the default label associated with a bug issue. area/csi-powermax Issue pertains to the CSI Driver for Dell EMC PowerMax labels Jan 31, 2022
@shanmydell shanmydell added this to the v1.2.0 milestone Jan 31, 2022
@shanmydell shanmydell self-assigned this Jan 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/csi-powermax Issue pertains to the CSI Driver for Dell EMC PowerMax type/bug Something isn't working. This is the default label associated with a bug issue.
Projects
None yet
Development

No branches or pull requests

1 participant