SH013: Dangerous file permissions¶

Severity: medium · Category: security · Applies to: all projects

Why it matters¶

World-writable files can be modified by any user on the machine, and executable env files hint at secrets being run or shared carelessly.

Use chmod o-w on the file; env files should be 600 or 640.

Skip it everywhere in devshield.yml:

ignore:
  - SH013

Or skip one line with a comment on that line or the line above:

devshield-ignore: SH013