set an exception for migrate file permissions (#1798)

grokspawn · web-flow · commit 47dee8d60e47 · 2025-09-11T16:23:00.000Z
Signed-off-by: grokspawn &lt;jordan@nimblewidget.com&gt;
diff --git a/alpha/declcfg/write.go b/alpha/declcfg/write.go
@@ -608,7 +608,9 @@ func writeFile(cfg DeclarativeConfig, filename string, writeFunc WriteFunc) erro
 	if err := writeFunc(cfg, buf); err != nil {
 		return fmt.Errorf("write to buffer for %q: %v", filename, err)
 	}
-	if err := os.WriteFile(filename, buf.Bytes(), 0600); err != nil {
+	// we explicitly want to generate content from this function which is limited only by the user's umask (G306)
+	// nolint:gosec
+	if err := os.WriteFile(filename, buf.Bytes(), 0666); err != nil {
 		return fmt.Errorf("write file %q: %v", filename, err)
 	}
 	return nil

Original file line number	Diff line number	Diff line change
`@@ -608,7 +608,9 @@ func writeFile(cfg DeclarativeConfig, filename string, writeFunc WriteFunc) erro`
`608`	`608`	`if err := writeFunc(cfg, buf); err != nil {`
`609`	`609`	`return fmt.Errorf("write to buffer for %q: %v", filename, err)`
`610`	`610`	`}`
`611`		`- if err := os.WriteFile(filename, buf.Bytes(), 0600); err != nil {`
	`611`	`+ // we explicitly want to generate content from this function which is limited only by the user's umask (G306)`
	`612`	`+ // nolint:gosec`
	`613`	`+ if err := os.WriteFile(filename, buf.Bytes(), 0666); err != nil {`
`612`	`614`	`return fmt.Errorf("write file %q: %v", filename, err)`
`613`	`615`	`}`
`614`	`616`	`return nil`