fix: suppress gosec G117 false positive on credential payload field

benedictebn · claude · benedictebn · commit 32d6be350ba8 · 2026-02-24T10:28:38.000+01:00
The Password field is a credential payload sent to the API, not a
hardcoded secret.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/pkg/client/pullsecret.go b/pkg/client/pullsecret.go
@@ -9,7 +9,7 @@ type PullSecret struct {
 
 type PullSecretCredential struct {
 	Username string `json:"username"`
-	Password string `json:"password"`
+	Password string `json:"password"` //nolint:gosec // G117: this is a credential payload, not a hardcoded secret
 }
 
 type NewPullSecretRequest struct {

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@ type PullSecret struct {`
`9`	`9`
`10`	`10`	`type PullSecretCredential struct {`
`11`	`11`	Username string `json:"username"`
`12`		- Password string `json:"password"`
	`12`	+ Password string `json:"password"` //nolint:gosec // G117: this is a credential payload, not a hardcoded secret
`13`	`13`	`}`
`14`	`14`
`15`	`15`	`type NewPullSecretRequest struct {`