skip to content

detached 6cb035c

fix(pki): use append in RootFingerprint to satisfy gosec G602

commit: 6cb035c2f8e9bb6ea8a1145740d5fd7c8d1a9ee2
author: brice · 6mo ago · 2026-03-29 18:35 UTC
parent: d623483
signature: GPG VerifiedCD88F9E564E0102646FB6077A1A07C7C7C3E349D · arch-gpg Verified for the committer email

1 file · +3 -3

M internal/adapters/out/pki/ca.go +3 -3


@@ -87,9 +87,9 @@ func (ca *CA) RootCertificateDER() []byte { return ca.rootCert.Raw }
87	87		// formatted as colon-separated hex.
88	88		func (ca *CA) RootFingerprint() string {
89	89		sum := sha256.Sum256(ca.rootCert.Raw)
90		-	parts := make([]string, len(sum))
91		-	for i, b := range sum {
92		-	parts[i] = fmt.Sprintf("%02X", b)
	90	+	parts := make([]string, 0, sha256.Size)
	91	+	for _, b := range sum {
	92	+	parts = append(parts, fmt.Sprintf("%02X", b))
93	93		}
94	94		return strings.Join(parts, ":")
95	95		}


@@ -87,9 +87,9 @@ func (ca *CA) RootCertificateDER() []byte { return ca.rootCert.Raw }
87		// formatted as colon-separated hex.	87		// formatted as colon-separated hex.
88		func (ca *CA) RootFingerprint() string {	88		func (ca *CA) RootFingerprint() string {
89		sum := sha256.Sum256(ca.rootCert.Raw)	89		sum := sha256.Sum256(ca.rootCert.Raw)
90	-	parts := make([]string, len(sum))	90	+	parts := make([]string, 0, sha256.Size)
91	-	for i, b := range sum {	91	+	for _, b := range sum {
92	-	parts[i] = fmt.Sprintf("%02X", b)	92	+	parts = append(parts, fmt.Sprintf("%02X", b))
93		}	93		}
94		return strings.Join(parts, ":")	94		return strings.Join(parts, ":")
95		}	95		}