unhandled-error: Unhandled error in call to function io.PipeWriter.Close (revive)

unhandled-error: Unhandled error in call to function io.PipeWriter.Write (revive)

unhandled-error: Unhandled error in call to function os.File.Close (revive)

G115: integer overflow conversion uint32 -> int32 (gosec)

G115: integer overflow conversion uint32 -> int32 (gosec)

G115: integer overflow conversion uint32 -> int32 (gosec)

G115: integer overflow conversion uint32 -> int32 (gosec)

G306: Expect WriteFile permissions to be 0600 or less (gosec)

G306: Expect WriteFile permissions to be 0600 or less (gosec)

Error return value of `asyncRecorder.RecordInterceptionEnded` is not checked (errcheck)

Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. To opt out of this change, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.