Tobias Gesellchen f33a306c47 chore: suppress math/rand Semgrep finding on two non-security use sites ...

Addresses the Semgrep finding on PR #599
(go.lang.security.audit.crypto.math_random.math-random-used) on the
update-check jitter delay, and applies the same treatment to the #419
activity-log filename suffix, which has the same non-security shape but
predates this PR's diff so it wasn't flagged.

Neither value is ever compared, kept secret, or otherwise security-
sensitive (a sleep duration and a filename-uniqueness suffix), so
crypto/rand would only add error-handling overhead for no real benefit.
Suppressed with the same // nosemgrep: <rule-id> pattern already used in
the mock-amazon/mock-spotify/mock-tunein servers, mirroring the existing
//nolint:gosec on the same lines.

Refs #591

2026-08-09 01:22:03 +02:00

..

client

feat(cli): play a URL via UPnP/AVTransport, no app-key or DNS (refs #517)

2026-06-27 21:27:53 +02:00

config

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

discovery

fix(player,discovery): normalize uuid: prefix for STORED_MUSIC accounts; fill MediaServer.Address

2026-06-09 22:50:49 +02:00

dlna

feat(example-dlna-server): album art, real media via --media-dir, fix discovery, BrowseMetadata + access log

2026-06-14 21:36:01 +02:00

models

feat(admin): add local activity log + in-memory dismissal cache

2026-08-08 23:49:57 +02:00

service

chore: suppress math/rand Semgrep finding on two non-security use sites

2026-08-09 01:22:03 +02:00

speaker

feat(cli): play a URL via UPnP/AVTransport, no app-key or DNS (refs #517)

2026-06-27 21:27:53 +02:00

ssh

sec8: document Run() invariant — command must never come from user HTTP input

2026-05-25 21:01:01 +02:00

telnet

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

testutils

fix(ci): gate http-client tests on mock readiness; address semgrep findings (refs #451)

2026-06-06 19:11:24 +02:00