diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 40b4563aa..7ea60daca 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,5 +26,5 @@ jobs: with: only-latest-golang: false run-codeql: true - golangci-lint-version: "v2.10.1" + golangci-lint-version: "v2.12.1" secrets: inherit diff --git a/command/oauth/cmd.go b/command/oauth/cmd.go index f0bb5a544..655637c52 100644 --- a/command/oauth/cmd.go +++ b/command/oauth/cmd.go @@ -526,7 +526,7 @@ func oauthCmd(c *cli.Context) error { fmt.Println(tok.AccessToken) } } else { - b, err := json.MarshalIndent(tok, "", " ") + b, err := json.MarshalIndent(tok, "", " ") // #nosec G117 -- printing the token details intentionally if err != nil { return errors.Wrapf(err, "error marshaling token data") } @@ -1318,7 +1318,7 @@ func (o *oauth) badRequest(w http.ResponseWriter, msg string) { w.Write([]byte(``)) w.Write([]byte(`
`))
w.Write([]byte(`Failure
`))
- w.Write([]byte(msg))
+ w.Write([]byte(msg)) // #nosec G705 -- message is either a string literal, or comes from (trusted) IdP
w.Write([]byte(`