020f3a7ad9
There's only 3 locations where it's hit, so putting #gosec ignore comments in those locations. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
22 lines
484 B
Go
22 lines
484 B
Go
package manager
|
|
|
|
import "os/exec"
|
|
|
|
// Candidate represents a possible plugin candidate, for mocking purposes
|
|
type Candidate interface {
|
|
Path() string
|
|
Metadata() ([]byte, error)
|
|
}
|
|
|
|
type candidate struct {
|
|
path string
|
|
}
|
|
|
|
func (c *candidate) Path() string {
|
|
return c.path
|
|
}
|
|
|
|
func (c *candidate) Metadata() ([]byte, error) {
|
|
return exec.Command(c.path, MetadataSubcommandName).Output() // #nosec G204 -- ignore "Subprocess launched with a potential tainted input or cmd arguments"
|
|
}
|