admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-01-31 13:53:14 +08:00
Code Issues Packages Projects Releases Wiki Activity

chore: implement process-safe temp file cleanup (#9241)

Browse Source 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@users.noreply.github.com>
This commit is contained in:
Teppei Fukuda
2025-07-28 17:49:03 +04:00
committed by GitHub
parent 6095984d53
commit 8f5b56005a
20 changed files with 327 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
misc/lint/rules.go
View File

@@ -35,3 +35,16 @@ func mapSet(m dsl.Matcher) {
m.Match(`map[$x]struct{}`).
Report("use github.com/aquasecurity/trivy/pkg/set.Set instead of map.")
}
// Enforce usage of x/os package for temporary file operations
func tempFileOps(m dsl.Matcher) {
m.Match(`os.CreateTemp($*args)`).
Where(!m.File().Name.Matches(`.*_test\.go$`)).
Suggest(`xos.CreateTemp($args)`).
Report("use github.com/aquasecurity/trivy/pkg/x/os.CreateTemp instead of os.CreateTemp for process-safe temp file cleanup")
m.Match(`os.MkdirTemp($*args)`).
Where(!m.File().Name.Matches(`.*_test\.go$`)).
Suggest(`xos.MkdirTemp($args)`).
Report("use github.com/aquasecurity/trivy/pkg/x/os.MkdirTemp instead of os.MkdirTemp for process-safe temp file cleanup")
}