fix: use 0o750 directory permissions to satisfy gosec

1 file · +1 -1

M internal/adapters/out/filesystem/previewstore.go +1 -1


@@ -65,7 +65,7 @@ func (s *PreviewStore) Save(_ context.Context, previews []domain.PreviewRoute) e
65	65
66	66		// Atomic write: temp file → rename
67	67		dir := filepath.Dir(s.path)
68		-	if err := os.MkdirAll(dir, 0o755); err != nil {
	68	+	if err := os.MkdirAll(dir, 0o750); err != nil {
69	69		return err
70	70		}
71	71		tmp, err := os.CreateTemp(dir, ".previews-*.json.tmp")


@@ -65,7 +65,7 @@ func (s *PreviewStore) Save(_ context.Context, previews []domain.PreviewRoute) e
65			65
66		// Atomic write: temp file → rename	66		// Atomic write: temp file → rename
67		dir := filepath.Dir(s.path)	67		dir := filepath.Dir(s.path)
68	-	if err := os.MkdirAll(dir, 0o755); err != nil {	68	+	if err := os.MkdirAll(dir, 0o750); err != nil {
69		return err	69		return err
70		}	70		}
71		tmp, err := os.CreateTemp(dir, ".previews-*.json.tmp")	71		tmp, err := os.CreateTemp(dir, ".previews-*.json.tmp")