Exclude linter false positive regarding exposed debug endpoint
for fleetcontroller and fleetagent because they only listen on
localhost.
In the future we might only activate them when a debug mode is enabled
but for now we do not want to change functionality since it is not a
security issue.
{
"path": "pkg/controllers/clusterregistration/controller.go",
"text": "G101: Potential hardcoded credentials"
+ },
+ {
+ "path": "cmd/fleetcontroller/main.go",
+ "text": "G108: Profiling endpoint is automatically exposed on /debug/pprof"
+ },
+ {
+ "path": "cmd/fleetagent/main.go",
+ "text": "G108: Profiling endpoint is automatically exposed on /debug/pprof"
}
]
}
