fix: use 0600 perms for tmp files for post analyzers (#6386)

aquasecurity · Mar 27, 2024 · 9d7f5c9 · 9d7f5c9
1 parent f148eb1
commit 9d7f5c9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/fanal/analyzer/fs.go b/pkg/fanal/analyzer/fs.go
@@ -55,7 +55,8 @@ func (c *CompositeFS) CopyFileToTemp(opener Opener, info os.FileInfo) (string, e
 		return "", xerrors.Errorf("copy error: %w", err)
 	}
 
-	if err = os.Chmod(f.Name(), info.Mode()); err != nil {
+	// Use 0600 instead of file permissions to avoid errors when a file uses incorrect permissions (e.g. 0044).
+	if err = os.Chmod(f.Name(), 0600); err != nil {
 		return "", xerrors.Errorf("chmod error: %w", err)
 	}