Skip to content
Strider

dangerous-directory-removal

Default severity: error

Passing the direct result of os.TempDir or a user directory helper to os.RemoveAll deletes the entire shared directory rather than an application-owned child. This is commonly caused by confusing TempDir with a directory-creation helper or forgetting to append a suffix.

The check covers the temporary, user cache, user configuration, and user home directory helpers.

Bad

Section titled “Bad”
directory := os.TempDir(); defer os.RemoveAll(directory)

Good

Section titled “Good”
directory, err := os.MkdirTemp(os.TempDir(), `app-*`); defer os.RemoveAll(directory)