Silent false positive G702

It is by design that the admin passes the configuration
via environment variable.

Author: fwiesel

internal/controller/secret_controller.go

@@ -112,7 +112,7 @@ func (r *SecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctr
 	// Save the last resource version to file system
 	pki := os.Getenv("PKI_PATH")
 	path := filepath.Join(pki, "CA", ".last_resource_version")
-	if err = os.WriteFile(path, []byte(secret.ResourceVersion), 0600); err != nil {
+	if err = os.WriteFile(path, []byte(secret.ResourceVersion), 0600); err != nil { //nolint:gosec // PKI_PATH is controlled by deployment configuration
 		// not a failure condition, just log the error
 		log.Error(err, "failed to write last resource version", "path", path)
 	}
@@ -128,7 +128,7 @@ func (r *SecretReconciler) SetupWithManager(mgr ctrl.Manager) error {
 	// processing if the resource version hasn't changed
 	pki := os.Getenv("PKI_PATH")
 	path := filepath.Join(pki, "CA", ".last_resource_version")
-	if buf, err := os.ReadFile(path); err != nil {
+	if buf, err := os.ReadFile(path); err != nil { //nolint:gosec // PKI_PATH is controlled by deployment configuration
 		logger.Log.Info("No last resource version found for PKI secrets", "path", path)
 	} else {
 		r.lastResourceVersion = string(buf)