comment

icco · Dec 20, 2024 · 7e9f6de · 7e9f6de
1 parent 9319de3
commit 7e9f6de
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/extract.go b/extract.go
@@ -33,6 +33,7 @@ func ExtractPostmortems(loc string, dir string) error {
 
 	var data []byte
 	if isURL(loc) {
+		// #nosec
 		resp, err := http.Get(loc)
 		if err != nil {
 			return fmt.Errorf("could not get %q: %w", loc, err)

diff --git a/postmortem.go b/postmortem.go
@@ -117,7 +117,7 @@ func GenerateJSON(d string) error {
 		return err
 	}
 
-	err = os.WriteFile(fp, j, 0644)
+	err = os.WriteFile(fp, j, 0600)
 	if err != nil {
 		return err
 	}
@@ -148,7 +148,7 @@ func GenerateJSON(d string) error {
 			if err != nil {
 				return err
 			}
-			err = os.WriteFile(fp, j, 0644)
+			err = os.WriteFile(fp, j, 0600)
 			if err != nil {
 				return err
 			}
@@ -188,7 +188,7 @@ func (pm *Postmortem) Save(dir string) error {
 	}
 
 	// Write postmortem data from memory to file.
-	if err := os.WriteFile(filepath.Join(dir, pm.UUID+".md"), data.Bytes(), 0644); err != nil {
+	if err := os.WriteFile(filepath.Join(dir, pm.UUID+".md"), data.Bytes(), 0600); err != nil {
 		return fmt.Errorf("error writing file: %w", err)
 	}