Add gosec exclusions

Author: hslatman

token/parse.go

@@ -7,6 +7,7 @@ import (
 	"time"
 
 	"github.com/pkg/errors"
+
 	"go.step.sm/crypto/jose"
 )
 
@@ -52,7 +53,7 @@ type Payload struct {
 	Version                 interface{}       `json:"ver"`
 	XMSMirID                string            `json:"xms_mirid"`
 	K8sSANamespace          string            `json:"kubernetes.io/serviceaccount/namespace,omitempty"`
-	K8sSASecretName         string            `json:"kubernetes.io/serviceaccount/secret.name,omitempty"`
+	K8sSASecretName         string            `json:"kubernetes.io/serviceaccount/secret.name,omitempty"` //nolint:gosec,G117 // property used for JSON (un)marshaling
 	K8sSAServiceAccountName string            `json:"kubernetes.io/serviceaccount/service-account.name,omitempty"`
 	K8sSAServiceAccountUID  string            `json:"kubernetes.io/serviceaccount/service-account.uid,omitempty"`
 	Google                  *GCPGooglePayload `json:"google"` // GCP token claims

ui/ui.go

@@ -10,6 +10,7 @@ import (
 	"github.com/chzyer/readline"
 	"github.com/manifoldco/promptui"
 	"github.com/pkg/errors"
+
 	"go.step.sm/crypto/randutil"
 )
 
@@ -305,7 +306,7 @@ func preparePromptTerminal() (func(), error) {
 			tty.Close()
 		}
 
-		fd := int(tty.Fd())
+		fd := int(tty.Fd()) //nolint:gosec,G115 // uintptr comes from file descriptor
 		state, err := readline.MakeRaw(fd)
 		if err != nil {
 			defer clean()
@@ -335,7 +336,7 @@ func prepareSelectTerminal() (func(), error) {
 			tty.Close()
 		}
 
-		fd := int(tty.Fd())
+		fd := int(tty.Fd()) //nolint:gosec,G115 // uintptr comes from file descriptor
 		state, err := readline.MakeRaw(fd)
 		if err != nil {
 			defer clean()

usage/renderer.go

@@ -90,7 +90,7 @@ func (r *Renderer) write(b []byte) {
 }
 
 func (r *Renderer) printf(s string, a ...interface{}) {
-	fmt.Fprintf(r.out.w, s, a...)
+	fmt.Fprintf(r.out.w, s, a...) //nolint:gosec,G705 // renders internal help content
 }
 
 func (r *Renderer) capture(mode RenderMode) {