1
32%
master: 31%

Ran 01 Jun 2026 08:48AM UTC

Files 47

Run time 3s

Badge

Embed ▾

Committed 01 Jun 2026 08:45AM UTC coverage: 31.353% (-0.1%) from 31.491%

Job # 26744605803.1

Build Type

Pull #642

github

Committed by

ujwalsah

Commit Message

fix: resolve CodeQL go/insecure-hostkeycallback in SCP

Replace ssh.InsecureIgnoreHostKey() with proper known_hosts verification.

Changes:
- Default behavior now requires hosts to be in ~/.ssh/known_hosts
- Added known_hosts_file config option to specify a custom file path
- Added skip_host_key_verification config option as an explicit opt-in
  for insecure behavior (with deprecation warning logged)
- If known_hosts file doesn't exist, returns a clear error message with
  instructions rather than silently creating files

Resolves NR-560141.

Pull Request Pull Request #642: fix: resolve CodeQL go/insecure-hostkeycallback in SCP

Coverage Stats

2000 of 6379 relevant lines covered (31.35%)

9.07 hits per line

newrelic / nri-flex / 26744605803 / 1
32%
master: 31%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job run-linux - 26744605803.1

newrelic / nri-flex / 26744605803 / 1 32% master: 31%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job run-linux - 26744605803.1

newrelic / nri-flex / 26744605803 / 1
32%
master: 31%

README BADGES
x