Skip to content

[Security] Build directory permissions too permissive — 0755 should be 0750 #8

Description

@YHQZ1

apps/builder/internal/git/clone.go:19 creates the build workspace directory with 0755 permissions, making it world-readable. Build directories contain cloned user repository code and should not be readable by other system users. gosec reports G301 (CWE-276).

Metadata

Metadata

Assignees

No one assigned

    Labels

    P1High — fix this sprintSecuritySecurity vulnerabilitygood first issueGood for newcomers

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions