fix(lint): sanitize UPTOP_KEYS path for gosec G703

2026-05-27 16:59:02 -04:00
parent 64b49187f5
commit c8e9893b59
1 changed files with 2 additions and 1 deletions
@@ -10,6 +10,7 @@ import (
 	"net/url"
 	"os"
 	"os/signal"
+	"path/filepath"
 	"strconv"
 	"strings"
 	"sync"
@@ -576,7 +577,7 @@ func seedKeysFromEnv(s store.Store) {
 	}

 	if path := os.Getenv("UPTOP_KEYS"); path != "" {
-		f, err := os.Open(path)
+		f, err := os.Open(filepath.Clean(path))
 		if err == nil {
 			scanner := bufio.NewScanner(f)
 			for scanner.Scan() {