chore(containerd): add lint exemption

Signed-off-by: Vaughn Dice <vdice@akamai.com>

Author: vdice

internal/containerd/restart_unix.go

@@ -151,8 +151,9 @@ func ListSystemdUnits() ([]byte, error) {
 }
 
 func nsenterCmd(cmd ...string) *exec.Cmd {
+	// #nosec G204 G702
 	return exec.CommandContext(context.Background(), "nsenter",
-		append([]string{fmt.Sprintf("-m/%s/proc/1/ns/mnt", os.Getenv("HOST_ROOT")), "--"}, cmd...)...) // #nosec G204
+		append([]string{fmt.Sprintf("-m/%s/proc/1/ns/mnt", os.Getenv("HOST_ROOT")), "--"}, cmd...)...)
 }
 
 func getPid(executable string) (int, error) {

internal/controller/shim_controller.go

@@ -597,7 +597,7 @@ func (sr *ShimReconciler) handleDeployRuntimeClass(ctx context.Context, shim *rc
 	}
 	patchMethod := client.RawPatch(types.ApplyPatchType, runtimeClassData)
 	patchOptions := &client.PatchOptions{
-		Force:        ptr(true), // Force b/c any fields we are setting need to be owned by the spin-operator
+		Force:        ptr(true), // Force b/c any fields we are setting need to be owned by the shim-operator
 		FieldManager: "shim-operator",
 	}