Response to review comments: add gosec, add comment to main.go

.github/workflows/static.yml

@@ -52,6 +52,11 @@ jobs:
           cd $GITHUB_WORKSPACE/appstudio-controller
           make gosec
 
+      - name: "Ensure 'appstudio-shared' passes 'go-sec' - run 'make gosec' to identify issues"
+        run: |
+          cd $GITHUB_WORKSPACE/appstudio-shared
+          make gosec
+
       - name: "Ensure 'backend' passes 'go-lint' - run 'make lint' to identify issues"
         run: |
           curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.40.1

appstudio-shared/main.go

@@ -18,6 +18,7 @@ package main
 
 import (
 	"flag"
+	"fmt"
 	"os"
 
 	// Import all Kubernetes client auth plugins (e.g. Azure, GCP, OIDC, etc.)
@@ -48,6 +49,17 @@ func init() {
 }
 
 func main() {
+
+	// NOTE: This code will never execute: it was generated by the kubebuilder scaffolding, and is (seemingly?) required
+	// in order to perform certain kubebuilder operations.
+	//
+	// To prevent it from runnign, I have added the following statement.
+	if fmt.Errorf("this could should not execute") != nil {
+		fmt.Println("Appstudio-shared code should not be invoked directly.")
+		os.Exit(1)
+		return
+	}
+
 	var metricsAddr string
 	var enableLeaderElection bool
 	var probeAddr string