Cobra Rework + Refactor & Exit Codes #20
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| func httpGetInternal(fullUrl, privateToken, userAgent string) ([]byte, error) { | ||
| tr := &http.Transport{ | ||
| TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, |
Check failure
Code scanning / CodeQL
Disabled TLS certificate check High
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix AI 3 months ago
To fix the problem, we need to ensure that TLS certificate verification is enabled. This involves setting InsecureSkipVerify to false and properly configuring the TLS client to trust the server's certificate. This can be done by using a certificate pool that includes the server's certificate or by relying on the system's root certificate pool.
The best way to fix this without changing existing functionality is to remove the InsecureSkipVerify: true setting and ensure that the TLS client uses a proper certificate pool. This change should be made in the httpGetInternal function in the pkg/api/api.go file.
| @@ -121,3 +121,3 @@ | ||
| tr := &http.Transport{ | ||
| TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, | ||
| TLSClientConfig: &tls.Config{}, | ||
| } |
Cobra Rework
Major Changes
gdownwith the following subcommands:file(updates/creates a single file)folder(updates/creates a folder recursively)version(displays the appname + version)pkgfolderapifolderclifolderlogicfolder