@@ -936,7 +936,7 @@ func (a *agent) run() (retErr error) {
936936connMan .startAgentAPI ("send logs" ,gracefulShutdownBehaviorRemain ,
937937func (ctx context.Context ,aAPI proto.DRPCAgentClient24 )error {
938938err := a .logSender .SendLoop (ctx ,aAPI )
939- if xerrors .Is (err ,agentsdk .LogLimitExceededError ) {
939+ if xerrors .Is (err ,agentsdk .ErrLogLimitExceeded ) {
940940// we don't want this error to tear down the API connection and propagate to the
941941// other routines that use the API. The LogSender has already dropped a warning
942942// log, so just return nil here.
@@ -1564,9 +1564,13 @@ func (a *agent) Collect(ctx context.Context, networkStats map[netlogtype.Connect
15641564}
15651565for conn ,counts := range networkStats {
15661566stats .ConnectionsByProto [conn .Proto .String ()]++
1567+ // #nosec G115 - Safe conversions for network statistics which we expect to be within int64 range
15671568stats .RxBytes += int64 (counts .RxBytes )
1569+ // #nosec G115 - Safe conversions for network statistics which we expect to be within int64 range
15681570stats .RxPackets += int64 (counts .RxPackets )
1571+ // #nosec G115 - Safe conversions for network statistics which we expect to be within int64 range
15691572stats .TxBytes += int64 (counts .TxBytes )
1573+ // #nosec G115 - Safe conversions for network statistics which we expect to be within int64 range
15701574stats .TxPackets += int64 (counts .TxPackets )
15711575}
15721576
@@ -1730,7 +1734,7 @@ func (a *agent) HTTPDebug() http.Handler {
17301734r .Get ("/debug/magicsock" ,a .HandleHTTPDebugMagicsock )
17311735r .Get ("/debug/magicsock/debug-logging/{state}" ,a .HandleHTTPMagicsockDebugLoggingState )
17321736r .Get ("/debug/manifest" ,a .HandleHTTPDebugManifest )
1733- r .NotFound (func (w http.ResponseWriter ,r * http.Request ) {
1737+ r .NotFound (func (w http.ResponseWriter ,_ * http.Request ) {
17341738w .WriteHeader (http .StatusNotFound )
17351739_ ,_ = w .Write ([]byte ("404 not found" ))
17361740})
@@ -2016,7 +2020,7 @@ func (a *apiConnRoutineManager) wait() error {
20162020}
20172021
20182022func PrometheusMetricsHandler (prometheusRegistry * prometheus.Registry ,logger slog.Logger ) http.Handler {
2019- return http .HandlerFunc (func (w http.ResponseWriter ,r * http.Request ) {
2023+ return http .HandlerFunc (func (w http.ResponseWriter ,_ * http.Request ) {
20202024w .Header ().Set ("Content-Type" ,"text/plain" )
20212025
20222026// Based on: https://github.com/tailscale/tailscale/blob/280255acae604796a1113861f5a84e6fa2dc6121/ipn/localapi/localapi.go#L489
@@ -2052,5 +2056,6 @@ func WorkspaceKeySeed(workspaceID uuid.UUID, agentName string) (int64, error) {
20522056return 42 ,err
20532057}
20542058
2059+ // #nosec G115 - Safe conversion to generate int64 hash from Sum64, data loss acceptable
20552060return int64 (h .Sum64 ()),nil
20562061}