1
32%
master: 31%

Ran 01 Jun 2026 12:58PM UTC

Files 47

Run time 1s

Badge

Embed ▾

Committed 01 Jun 2026 12:55PM UTC coverage: 31.587% (+0.1%) from 31.491%

Job # 26756226152.1

Build Type

Pull #642

github

Committed by

ujwalsah

Commit Message

fix: resolve CodeQL go/insecure-hostkeycallback in SCP

Replace ssh.InsecureIgnoreHostKey() with proper known_hosts verification.

Changes:
- Default behavior requires hosts in ~/.ssh/known_hosts
- known_hosts_file: specify a custom path (supports ~ expansion)
- skip_host_key_verification: explicit opt-in for insecure behavior
  (logs warning once via sync.Once, uses custom callback to avoid
  triggering CodeQL on ssh.InsecureIgnoreHostKey)
- Returns clear error with instructions if known_hosts file not found
- No filesystem side effects (doesn't create files/directories)
- Added unit tests for getHostKeyCallback and expandHome

Resolves NR-560141.

Pull Request Pull Request #642: fix: resolve CodeQL go/insecure-hostkeycallback in SCP

Coverage Stats

2020 of 6395 relevant lines covered (31.59%)

9.06 hits per line

newrelic / nri-flex / 26756226152 / 1
32%
master: 31%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job run-linux - 26756226152.1

newrelic / nri-flex / 26756226152 / 1 32% master: 31%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job run-linux - 26756226152.1

newrelic / nri-flex / 26756226152 / 1
32%
master: 31%

README BADGES
x