Merge pull request #2 from claudiunicolaa/develop

v1.0 -> v1.1
claudiunicolaa · Feb 24, 2021 · a45bbbf · a45bbbf
2 parents 291b25c + a85bd9f
commit a45bbbf
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 3 deletions.
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -21,6 +21,21 @@ jobs:
       with:
         version: v1.33
 
+  security:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Set up Go 1.x
+      uses: actions/setup-go@v2
+      with:
+        go-version: 1.15.x
+    - name: Check out code into the Go module directory
+      uses: actions/checkout@v2
+    - name: Run gosec
+      uses: golangci/golangci-lint-action@v2
+      with:
+        version: v1.33
+        args: -E gosec
+
   test:
     runs-on: ubuntu-latest
     steps:

diff --git a/envsync_test.go b/envsync_test.go
@@ -60,7 +60,7 @@ func TestCallWithOneNonExistingFilename(t *testing.T) {
 		panic(err)
 	}
 	filename := dir + "/.env"
-	err = ioutil.WriteFile(filename, []byte{}, 0644)
+	err = ioutil.WriteFile(filename, []byte{}, 0600)
 	if err != nil {
 		panic(err)
 	}
@@ -82,7 +82,7 @@ func TestCallWithTwoNonExistingFilenames(t *testing.T) {
 		panic(err)
 	}
 	filename := dir + "/.env"
-	err = ioutil.WriteFile(filename, []byte{}, 0644)
+	err = ioutil.WriteFile(filename, []byte{}, 0600)
 	if err != nil {
 		panic(err)
 	}
@@ -104,7 +104,7 @@ func TestCallWithExampleFileExistingAndEnvFileDefault(t *testing.T) {
 		panic(err)
 	}
 	filename := dir + "/.env"
-	err = ioutil.WriteFile(filename, []byte{}, 0644)
+	err = ioutil.WriteFile(filename, []byte{}, 0600)
 	if err != nil {
 		panic(err)
 	}