mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-18 08:36:13 +00:00
Addresses the Semgrep finding on PR #599 (go.lang.security.audit.crypto.math_random.math-random-used) on the update-check jitter delay, and applies the same treatment to the #419 activity-log filename suffix, which has the same non-security shape but predates this PR's diff so it wasn't flagged. Neither value is ever compared, kept secret, or otherwise security- sensitive (a sleep duration and a filename-uniqueness suffix), so crypto/rand would only add error-handling overhead for no real benefit. Suppressed with the same // nosemgrep: <rule-id> pattern already used in the mock-amazon/mock-spotify/mock-tunein servers, mirroring the existing //nolint:gosec on the same lines. Refs #591