Skip to content

Commit 9d7f5c9

Browse files
authored
fix: use 0600 perms for tmp files for post analyzers (aquasecurity#6386)
1 parent f148eb1 commit 9d7f5c9

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

pkg/fanal/analyzer/fs.go

+2-1
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,8 @@ func (c *CompositeFS) CopyFileToTemp(opener Opener, info os.FileInfo) (string, e
5555
return "", xerrors.Errorf("copy error: %w", err)
5656
}
5757

58-
if err = os.Chmod(f.Name(), info.Mode()); err != nil {
58+
// Use 0600 instead of file permissions to avoid errors when a file uses incorrect permissions (e.g. 0044).
59+
if err = os.Chmod(f.Name(), 0600); err != nil {
5960
return "", xerrors.Errorf("chmod error: %w", err)
6061
}
6162

0 commit comments

Comments
 (0)