Additional linter fixes

Author: tjmoore4

internal/bridge/client.go

@@ -155,10 +155,9 @@ type ClusterRoleApiResource struct {
 	ClusterId    string `json:"cluster_id"`
 	Flavor       string `json:"flavor"`
 	Name         string `json:"name"`
-	//nolint:gosec // G117: JSON serialization field for API response, not a hardcoded credential.
-	Password string `json:"password"`
-	Team     string `json:"team_id"`
-	URI      string `json:"uri"`
+	Password     string `json:"password"`
+	Team         string `json:"team_id"`
+	URI          string `json:"uri"`
 }
 
 // ClusterRoleList holds a slice of ClusterRoleApiResource
@@ -279,8 +278,7 @@ func (c *Client) doWithBackoff(
 
 		if err == nil {
 			request.Header = headers.Clone()
-
-			//nolint:bodyclose,gosec // bodyclose: response returned to caller; G704: URL is from trusted Bridge API configuration.
+			//nolint:bodyclose // response returned to caller.
 			response, err = c.Do(request)
 		}
 

internal/bridge/client_test.go

@@ -1229,6 +1229,7 @@ func TestGetClusterRole(t *testing.T) {
 	}
 
 	t.Run("WeSendCorrectData", func(t *testing.T) {
+		//nolint:gosec // G117: Password is part of the API resource struct, not a credential in test context.
 		responsePayloadJson, err := json.Marshal(clusterRoleApiResource)
 		assert.NilError(t, err)
 
@@ -1251,6 +1252,7 @@ func TestGetClusterRole(t *testing.T) {
 	})
 
 	t.Run("OkResponse", func(t *testing.T) {
+		//nolint:gosec // G117: Password is part of the API resource struct, not a credential in test context.
 		responsePayloadJson, err := json.Marshal(clusterRoleApiResource)
 		assert.NilError(t, err)
 
@@ -1269,6 +1271,7 @@ func TestGetClusterRole(t *testing.T) {
 	})
 
 	t.Run("ErrorResponse", func(t *testing.T) {
+		//nolint:gosec // G117: Password is part of the API resource struct, not a credential in test context.
 		responsePayloadJson, err := json.Marshal(clusterRoleApiResource)
 		assert.NilError(t, err)
 

internal/bridge/crunchybridgecluster/mock_bridge_api.go

@@ -17,7 +17,6 @@ import (
 )
 
 type TestBridgeClient struct {
-	//nolint:gosec // G117: Test mock struct field, not a hardcoded credential.
 	ApiKey          string                                       `json:"apiKey,omitempty"`
 	TeamId          string                                       `json:"teamId,omitempty"`
 	Clusters        []*bridge.ClusterApiResource                 `json:"clusters,omitempty"`

internal/bridge/installation.go

@@ -39,8 +39,7 @@ var self = new(struct {
 type AuthObject struct {
 	ID        string    `json:"id"`
 	ExpiresAt time.Time `json:"expires_at"`
-	//nolint:gosec // G117: JSON serialization field for API response, not a hardcoded credential.
-	Secret string `json:"secret"`
+	Secret    string    `json:"secret"`
 }
 
 type Installation struct {

pkg/apis/postgres-operator.crunchydata.com/v1beta1/crunchy_bridgecluster_types.go

@@ -77,7 +77,6 @@ type CrunchyBridgeClusterSpec struct {
 
 	// The name of the secret containing the API key and team id
 	// +kubebuilder:validation:Required
-	//nolint:gosec // G117: Field holds secret name reference, not actual secret data.
 	Secret string `json:"secret"`
 
 	// The amount of storage available to the cluster in gigabytes.