fix(lint): restore G305 nosec suppression dropped in comment cleanup

[skevetter]

Summary

• A later commit in fix(lint): resolve single-occurrence gosec findings (G107, G110, G122, G302, G305) #879 ("style: update comments") stripped the #nosec G305 annotation on unzipFile's Zip Slip guard along with unrelated step-numbering comments, reintroducing the gosec G305 finding on main.
• Restores the suppression comment; confirmed G305 findings are back to 0 repo-wide (gosec total 139 → 138).

Summary by CodeRabbit

• Security
  • Documented the safety validation used during archive extraction to prevent unsafe file paths.

[netlify]

✅ Deploy Preview for images-devsy-sh canceled.

Name	Link
🔨 Latest commit	bd984b6
🔍 Latest deploy log	https://app.netlify.com/projects/images-devsy-sh/deploys/6a7315a7a915720008b770ae

[netlify]

✅ Deploy Preview for devsydev canceled.

Name	Link
🔨 Latest commit	bd984b6
🔍 Latest deploy log	https://app.netlify.com/projects/devsydev/deploys/6a7315a7e340050008d01920

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: a9777ca2-423b-47d8-8e95-f5c0c9488b46

📥 Commits

Reviewing files that changed from the base of the PR and between 3702354 and bd984b6.

📒 Files selected for processing (1)

• pkg/extract/zip.go

---

📝 Walkthrough

Walkthrough

The archive extraction code documents its existing path-prefix validation with a #nosec G305 annotation.

Changes

Archive extraction security

Layer / File(s)	Summary
Path validation annotation pkg/extract/zip.go	Adds a #nosec G305 comment that identifies the following HasPrefix check as protection for file-writing paths.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes restoring the G305 suppression removed during comment cleanup.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}