NVIDIA / nvidia-container-toolkit / 22132069552

39%

main: 43%

push

github

fix: Address gosec lint errors

* G703: Path traversal via taint analysis (gosec)

This change uses os.Root to handle the files created when
saving a CDI spec. This ensures that the user supplied content
(the path of the CDI spec file) does not resolve outside of
this root.

Signed-off-by: Evan Lezar <elezar@nvidia.com>

18 of 20 new or added lines in 1 file covered. (90.0%)

5698 of 14631 relevant lines covered (38.94%)

0.87 hits per line