d3m0k1d/BanForge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

feat: add new nosec flags for fix ci
Some checks failed
build / build (push) Failing after 1m38s
Details

Browse Source
This commit is contained in:
d3m0k1d
2026-02-19 11:09:59 +03:00
parent f628e24f58
commit 7918b3efe6
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
internal/blocker/firewalld.go
View File

@@ -45,6 +45,7 @@ func (f *Firewalld) Unban(ip string) error {
if err != nil {
return err
}
// #nosec G204 - ip is validated
cmd := exec.Command("firewall-cmd", "--zone=drop", "--remove-source", ip, "--permanent")
output, err := cmd.CombinedOutput()
if err != nil {

4
internal/blocker/nftables.go
View File

@@ -26,7 +26,7 @@ func (n *Nftables) Ban(ip string) error {
if err != nil {
return err
}
// #nosec G204 - ip is validated
cmd := exec.Command("nft", "add", "rule", "inet", "banforge", "banned",
"ip", "saddr", ip, "drop")
output, err := cmd.CombinedOutput()
@@ -253,7 +253,7 @@ func saveNftablesConfig(configPath string) error {
if err != nil {
return fmt.Errorf("failed to get nftables ruleset: %w", err)
}
// #nosec G204 - managed by system adminstartor
cmd = exec.Command("tee", configPath)
stdin, err := cmd.StdinPipe()
if err != nil {