fix: use #nosec directive for gosec suppressions

grokify · claude · grokify · commit b949aa199097 · 2026-02-28T20:01:40.000-08:00
Co-Authored-By: Claude Opus 4.5 &lt;noreply@anthropic.com&gt;
diff --git a/cmd/ogen-fixerror/main.go b/cmd/ogen-fixerror/main.go
@@ -42,7 +42,7 @@ func run(args []string) error {
 
 	filename := args[0]
 
-	content, err := os.ReadFile(filename) //nolint:gosec // G703: CLI tool, filename from trusted args
+	content, err := os.ReadFile(filename) // #nosec G703 -- CLI tool, filename from trusted args
 	if err != nil {
 		return fmt.Errorf("read file: %w", err)
 	}
@@ -54,7 +54,7 @@ func run(args []string) error {
 		return nil
 	}
 
-	if err := os.WriteFile(filename, fixed, 0600); err != nil { //nolint:gosec // G703: CLI tool, filename from trusted args
+	if err := os.WriteFile(filename, fixed, 0600); err != nil { // #nosec G703 -- CLI tool, filename from trusted args
 		return fmt.Errorf("write file: %w", err)
 	}
 
diff --git a/cmd/ogen-fixnull/main.go b/cmd/ogen-fixnull/main.go
@@ -39,7 +39,7 @@ func run(args []string) error {
 
 	filename := args[0]
 
-	content, err := os.ReadFile(filename) //nolint:gosec // G703: CLI tool, filename from trusted args
+	content, err := os.ReadFile(filename) // #nosec G703 -- CLI tool, filename from trusted args
 	if err != nil {
 		return fmt.Errorf("read file: %w", err)
 	}
@@ -51,7 +51,7 @@ func run(args []string) error {
 		return nil
 	}
 
-	if err := os.WriteFile(filename, fixed, 0600); err != nil { //nolint:gosec // G703: CLI tool, filename from trusted args
+	if err := os.WriteFile(filename, fixed, 0600); err != nil { // #nosec G703 -- CLI tool, filename from trusted args
 		return fmt.Errorf("write file: %w", err)
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,7 @@ func run(args []string) error {`
`42`	`42`
`43`	`43`	`filename := args[0]`
`44`	`44`
`45`		`- content, err := os.ReadFile(filename) //nolint:gosec // G703: CLI tool, filename from trusted args`
	`45`	`+ content, err := os.ReadFile(filename) // #nosec G703 -- CLI tool, filename from trusted args`
`46`	`46`	`if err != nil {`
`47`	`47`	`return fmt.Errorf("read file: %w", err)`
`48`	`48`	`}`
`@@ -54,7 +54,7 @@ func run(args []string) error {`
`54`	`54`	`return nil`
`55`	`55`	`}`
`56`	`56`
`57`		`- if err := os.WriteFile(filename, fixed, 0600); err != nil { //nolint:gosec // G703: CLI tool, filename from trusted args`
	`57`	`+ if err := os.WriteFile(filename, fixed, 0600); err != nil { // #nosec G703 -- CLI tool, filename from trusted args`
`58`	`58`	`return fmt.Errorf("write file: %w", err)`
`59`	`59`	`}`
`60`	`60`
Original file line number	Diff line number	Diff line change
`@@ -39,7 +39,7 @@ func run(args []string) error {`
`39`	`39`
`40`	`40`	`filename := args[0]`
`41`	`41`
`42`		`- content, err := os.ReadFile(filename) //nolint:gosec // G703: CLI tool, filename from trusted args`
	`42`	`+ content, err := os.ReadFile(filename) // #nosec G703 -- CLI tool, filename from trusted args`
`43`	`43`	`if err != nil {`
`44`	`44`	`return fmt.Errorf("read file: %w", err)`
`45`	`45`	`}`
`@@ -51,7 +51,7 @@ func run(args []string) error {`
`51`	`51`	`return nil`
`52`	`52`	`}`
`53`	`53`
`54`		`- if err := os.WriteFile(filename, fixed, 0600); err != nil { //nolint:gosec // G703: CLI tool, filename from trusted args`
	`54`	`+ if err := os.WriteFile(filename, fixed, 0600); err != nil { // #nosec G703 -- CLI tool, filename from trusted args`
`55`	`55`	`return fmt.Errorf("write file: %w", err)`
`56`	`56`	`}`
`57`	`57`