newrelic / nri-flex / 26744605803

32%

master: 31%

Build Type

Pull #642

github

Committed by ujwalsah

Commit Message

fix: resolve CodeQL go/insecure-hostkeycallback in SCP

Replace ssh.InsecureIgnoreHostKey() with proper known_hosts verification.

Changes:
- Default behavior now requires hosts to be in ~/.ssh/known_hosts
- Added known_hosts_file config option to specify a custom file path
- Added skip_host_key_verification config option as an explicit opt-in
  for insecure behavior (with deprecation warning logged)
- If known_hosts file doesn't exist, returns a clear error message with
  instructions rather than silently creating files

Resolves NR-560141.

Pull Request Pull Request #642: fix: resolve CodeQL go/insecure-hostkeycallback in SCP

Coverage Stats

16 of 30 new or added lines in 1 file covered. (53.33%)

14 existing lines in 1 file now uncovered.

2000 of 6379 relevant lines covered (31.35%)

9.07 hits per line