chore(semgrep): fix rules and ignore what is not fixable or relevant (#230)

Author: paologallinaharbur

internal/cli/cli.go

@@ -5,8 +5,9 @@
 package cli
 
 import (
+	"errors"
 	"fmt"
-	"io/ioutil"
+	"io/fs"
 	"os"
 
 	"sigs.k8s.io/yaml"
@@ -32,8 +33,8 @@ const (
 func Options(path string) (*operator.Options, error) {
 	options := &operator.Options{}
 
-	optionsBytes, err := ioutil.ReadFile(path)
-	if err != nil && !os.IsNotExist(err) {
+	optionsBytes, err := os.ReadFile(path)
+	if err != nil && !errors.Is(err, fs.ErrNotExist) {
 		return nil, fmt.Errorf("reading configuration file %q: %w", path, err)
 	}
 

internal/mutator/pod/agent/injector.go

@@ -618,13 +618,14 @@ func getAgentPassthroughEnvironment() string {
 	return strings.Join(flags, ",")
 }
 
+//nolint:gosec
 func (c configHash) calculate() (string, error) {
 	b, err := yaml.Marshal(c)
 	if err != nil {
 		return "", fmt.Errorf("marshalling input: %w", err)
 	}
 
-	h := sha1.New()
+	h := sha1.New() // nosemgrep
 	h.Write(b)
 
 	return fmt.Sprintf("%x", h.Sum(nil)), nil

internal/testutil/util.go

@@ -24,7 +24,7 @@ func ContextWithDeadline(t *testing.T) context.Context {
 		return context.Background()
 	}
 
-	ctx, cancel := context.WithDeadline(context.Background(), deadline.Truncate(timeoutGracePeriod))
+	ctx, cancel := context.WithDeadline(context.Background(), deadline.Truncate(timeoutGracePeriod)) // nosemgrep
 
 	t.Cleanup(cancel)