mod: avoid static vex path

Signed-off-by: Joshua Duffney <[email protected]>

Author: duffney

internal/copa/cli.go

@@ -135,8 +135,6 @@ func (c *CLI) BuildWithReport() *CLI {
 
 	if c.reportPath != "" {
 		c.cmd.Args = append(c.cmd.Args, "--report", c.reportPath)
-		c.vexPath = filepath.Join(os.TempDir(), defaultVexFile)
-		c.cmd.Args = append(c.cmd.Args, "--output", c.vexPath)
 	}
 
 	return c
@@ -157,6 +155,18 @@ func (c *CLI) setupAuth() error {
 	return nil
 }
 
+func (c *CLI) setupVexDir() error {
+	if c.reportPath != "" {
+		path, err := os.MkdirTemp(os.TempDir(), "vex-*")
+		if err != nil {
+			return err
+		}
+		c.vexPath = filepath.Join(path, defaultVexFile)
+		c.cmd.Args = append(c.cmd.Args, "--output", c.vexPath)
+	}
+	return nil
+}
+
 func (c *CLI) validateCommand() error {
 	if c.cmd == nil {
 		return fmt.Errorf("no command built - call a Build method first")
@@ -235,6 +245,10 @@ func (c *CLI) Run(ctx context.Context) (*ExecutionResult, error) {
 		return nil, fmt.Errorf("authentication setup failed: %w", err)
 	}
 
+	if err := c.setupVexDir(); err != nil {
+		return nil, fmt.Errorf("creating vex temp dir failed: %w", err)
+	}
+
 	result, err := c.execute(ctx)
 	if err != nil {
 		return result, fmt.Errorf("execution failed: %w", err)