Silence "codeql[go/insecure-hostkeycallback]: intentionally ignore host key for internal environment"

norio-nomura · norio-nomura · commit 11f59679d8d4 · 2025-11-12T15:29:42.000+09:00
Signed-off-by: Norio Nomura &lt;norio.nomura@gmail.com&gt;
diff --git a/pkg/sshutil/sshutil.go b/pkg/sshutil/sshutil.go
@@ -550,7 +550,7 @@ func ExecuteScriptViaInProcessClient(host string, port int, c *sshocker.SSHConfi
 	sshConfig := &ssh.ClientConfig{
 		User:            user,
 		Auth:            []ssh.AuthMethod{ssh.PublicKeys(signer)},
-		HostKeyCallback: ssh.InsecureIgnoreHostKey(),
+		HostKeyCallback: ssh.InsecureIgnoreHostKey(), // codeql[go/insecure-hostkeycallback]: intentionally ignore host key for internal environment
 		Timeout:         10 * time.Second,
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -550,7 +550,7 @@ func ExecuteScriptViaInProcessClient(host string, port int, c *sshocker.SSHConfi`
`550`	`550`	`sshConfig := &ssh.ClientConfig{`
`551`	`551`	`User: user,`
`552`	`552`	`Auth: []ssh.AuthMethod{ssh.PublicKeys(signer)},`
`553`		`- HostKeyCallback: ssh.InsecureIgnoreHostKey(),`
	`553`	`+ HostKeyCallback: ssh.InsecureIgnoreHostKey(), // codeql[go/insecure-hostkeycallback]: intentionally ignore host key for internal environment`
`554`	`554`	`Timeout: 10 * time.Second,`
`555`	`555`	`}`
`556`	`556`