Adding probe file write option to fix sca vuln (#8)

sunny-se · web-flow · commit c06de0341325 · 2026-01-29T17:24:39.000+05:30
diff --git a/Plugins/BrowserStackAccessibilityLint/BrowserStackAccessibilityLint.swift b/Plugins/BrowserStackAccessibilityLint/BrowserStackAccessibilityLint.swift
@@ -82,7 +82,7 @@ private func packageCacheRoot() -> URL {
         }
         let probe = target.appendingPathComponent(".write-probe-\(UUID().uuidString)")
         do {
-            try "probe".data(using: .utf8)?.write(to: probe, options: [.atomic])
+            try "probe".data(using: .utf8)?.write(to: probe, options: [.atomic, .completeFileProtection])
             try? fm.removeItem(at: probe)
         } catch {
             forwardExit(code: 2, message: "Unable to access cache directory. Please include directive \"--allow-writing-to-directory ~/.cache/\" where you are invoking the Swift package")

Original file line number	Diff line number	Diff line change
`@@ -82,7 +82,7 @@ private func packageCacheRoot() -> URL {`
`82`	`82`	`}`
`83`	`83`	`let probe = target.appendingPathComponent(".write-probe-\(UUID().uuidString)")`
`84`	`84`	`do {`
`85`		`- try "probe".data(using: .utf8)?.write(to: probe, options: [.atomic])`
	`85`	`+ try "probe".data(using: .utf8)?.write(to: probe, options: [.atomic, .completeFileProtection])`
`86`	`86`	`try? fm.removeItem(at: probe)`
`87`	`87`	`} catch {`
`88`	`88`	`forwardExit(code: 2, message: "Unable to access cache directory. Please include directive \"--allow-writing-to-directory ~/.cache/\" where you are invoking the Swift package")`