apps/builder/internal/git/clone.go:19 creates the build workspace directory with 0755 permissions, making it world-readable. Build directories contain cloned user repository code and should not be readable by other system users. gosec reports G301 (CWE-276).
apps/builder/internal/git/clone.go:19 creates the build workspace directory with 0755 permissions, making it world-readable. Build directories contain cloned user repository code and should not be readable by other system users. gosec reports G301 (CWE-276).