@@ -221,18 +221,18 @@ func startThreadOnMergeRequest(baseURL, token, projectID string, mergeRequestIID
221221 os .Exit (1 )
222222 }
223223
224- req , err := http .NewRequestWithContext (context .Background (), http .MethodPost ,
224+ req , err := http .NewRequestWithContext (context .Background (), http .MethodPost , //nolint:gosec // URL constructed from trusted CI environment variables
225225 fmt .Sprintf ("%s/projects/%s/merge_requests/%d/discussions" , baseURL , url .PathEscape (projectID ), mergeRequestIID ), bytes .NewBuffer (threadDataBytes ))
226226 if err != nil {
227- slog .Error (err .Error ())
227+ slog .Error (err .Error ()) //nolint:gosec // log message from trusted CI environment variables
228228 os .Exit (1 )
229229 }
230230 req .Header .Add ("PRIVATE-TOKEN" , token ) //nolint:canonicalheader
231231 req .Header .Add ("Content-Type" , "application/json" )
232232
233- resp , err := client .Do (req )
233+ resp , err := client .Do (req ) //nolint:gosec // URL constructed from trusted CI environment variables
234234 if err != nil {
235- slog .Error (err .Error ())
235+ slog .Error (err .Error ()) //nolint:gosec // log message from trusted CI environment variables
236236 os .Exit (1 )
237237 }
238238 defer resp .Body .Close ()
@@ -241,14 +241,14 @@ func startThreadOnMergeRequest(baseURL, token, projectID string, mergeRequestIID
241241func getMergeRequest (baseURL , token , projectID string , mergeRequestIID int ) (* MergeRequest , error ) {
242242 client := & http.Client {}
243243
244- req , err := http .NewRequestWithContext (context .Background (), http .MethodGet ,
244+ req , err := http .NewRequestWithContext (context .Background (), http .MethodGet , //nolint:gosec // URL constructed from trusted CI environment variables
245245 fmt .Sprintf ("%s/projects/%s/merge_requests/%d" , baseURL , url .PathEscape (projectID ), mergeRequestIID ), nil )
246246 if err != nil {
247247 return nil , err
248248 }
249249 req .Header .Add ("PRIVATE-TOKEN" , token ) //nolint:canonicalheader
250250
251- resp , err := client .Do (req )
251+ resp , err := client .Do (req ) //nolint:gosec // URL constructed from trusted CI environment variables
252252 if err != nil {
253253 return nil , err
254254 }
@@ -276,14 +276,14 @@ func getMergeRequest(baseURL, token, projectID string, mergeRequestIID int) (*Me
276276func getMergeRequestComments (baseURL , token , projectID string , mergeRequestIID int ) ([]Note , error ) {
277277 client := & http.Client {}
278278
279- req , err := http .NewRequestWithContext (context .Background (), http .MethodGet ,
279+ req , err := http .NewRequestWithContext (context .Background (), http .MethodGet , //nolint:gosec // URL constructed from trusted CI environment variables
280280 fmt .Sprintf ("%s/projects/%s/merge_requests/%d/notes" , baseURL , url .PathEscape (projectID ), mergeRequestIID ), nil )
281281 if err != nil {
282282 return nil , err
283283 }
284284 req .Header .Add ("PRIVATE-TOKEN" , token ) //nolint:canonicalheader
285285
286- resp , err := client .Do (req )
286+ resp , err := client .Do (req ) //nolint:gosec // URL constructed from trusted CI environment variables
287287 if err != nil {
288288 return nil , err
289289 }
@@ -309,13 +309,13 @@ func getProjectlabels(backportLabels map[string]struct{}, projectID string) erro
309309 if token == "" {
310310 return errors .New ("GITLAB_TOKEN not set" )
311311 }
312- req , err := http .NewRequestWithContext (context .Background (), http .MethodGet ,
312+ req , err := http .NewRequestWithContext (context .Background (), http .MethodGet , //nolint:gosec // URL constructed from trusted CI environment variables
313313 fmt .Sprintf ("%s/projects/%s/labels" , baseURL , url .PathEscape (projectID )), nil )
314314 if err != nil {
315315 return fmt .Errorf ("failed to create request: %w" , err )
316316 }
317317 req .Header .Add ("PRIVATE-TOKEN" , token ) //nolint:canonicalheader
318- resp , err := client .Do (req )
318+ resp , err := client .Do (req ) //nolint:gosec // URL constructed from trusted CI environment variables
319319 if err != nil {
320320 return fmt .Errorf ("failed to get project labels: %w" , err )
321321 }
@@ -353,14 +353,14 @@ func getProjectlabels(backportLabels map[string]struct{}, projectID string) erro
353353 if err != nil {
354354 return fmt .Errorf ("failed to marshal label data: %w" , err )
355355 }
356- req , err := http .NewRequestWithContext (context .Background (), http .MethodPost ,
356+ req , err := http .NewRequestWithContext (context .Background (), http .MethodPost , //nolint:gosec // URL constructed from trusted CI environment variables
357357 fmt .Sprintf ("%s/projects/%s/labels" , baseURL , url .PathEscape (projectID )), bytes .NewBuffer (labelDataBytes ))
358358 if err != nil {
359359 return fmt .Errorf ("failed to create request to create label: %w" , err )
360360 }
361361 req .Header .Add ("PRIVATE-TOKEN" , token ) //nolint:canonicalheader
362362 req .Header .Add ("Content-Type" , "application/json" )
363- resp , err := client .Do (req )
363+ resp , err := client .Do (req ) //nolint:gosec // URL constructed from trusted CI environment variables
364364 if err != nil {
365365 return fmt .Errorf ("failed to create label %s: %w" , label , err )
366366 }
@@ -387,13 +387,13 @@ func GetBranches() ([]string, error) {
387387 nextPageURL := fmt .Sprintf ("%s/projects/%s/repository/branches" , baseURL , url .PathEscape (projectID ))
388388
389389 for nextPageURL != "" {
390- req , err := http .NewRequestWithContext (context .Background (), http .MethodGet , nextPageURL , nil )
390+ req , err := http .NewRequestWithContext (context .Background (), http .MethodGet , nextPageURL , nil ) //nolint:gosec // URL constructed from trusted CI environment variables
391391 if err != nil {
392392 return nil , fmt .Errorf ("failed to create request: %w" , err )
393393 }
394394 req .Header .Add ("PRIVATE-TOKEN" , token ) //nolint:canonicalheader
395395
396- resp , err := client .Do (req )
396+ resp , err := client .Do (req ) //nolint:gosec // URL constructed from trusted CI environment variables
397397 if err != nil {
398398 return nil , fmt .Errorf ("failed to get branches: %w" , err )
399399 }
0 commit comments