fixing sec issues

cmd/cli/commands/sync/sync.go

@@ -63,9 +63,15 @@ func (p *SyncCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{})
 
 		pg := progressbar.New(-1)
 		destroyPg := func() {
-			pg.Finish()
-			pg.Clear()
-			pg.Close()
+			if err := pg.Finish(); err != nil {
+				slog.Error("failed to finish progressbar", "err", err)
+			}
+			if err := pg.Clear(); err != nil {
+				slog.Error("failed to clear progressbar", "err", err)
+			}
+			if err := pg.Close(); err != nil {
+				slog.Error("failed to close progressbar", "err", err)
+			}
 		}
 
 		pg.Describe(fmt.Sprintf("[%s] Checking status...", g.Name))

cmd/cli/main.go

@@ -30,7 +30,7 @@ func main() {
 	}
 
 	datastorepath := filepath.Join(roaming, "cloudsave", "data")
-	err = os.MkdirAll(datastorepath, 0740)
+	err = os.MkdirAll(datastorepath, 0600)
 	if err != nil {
 		panic("cannot make the datastore:" + err.Error())
 	}

cmd/cli/tools/prompt/credentials/credentials.go

@@ -89,7 +89,7 @@ func save(store map[string]credential) error {
 		Store: store,
 	}
 
-	f, err := os.OpenFile(filepath.Join(datastorePath, "credential.json"), os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0740)
+	f, err := os.OpenFile(filepath.Join(datastorePath, "credential.json"), os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0600)
 	if err != nil {
 		return fmt.Errorf("failed to open datastore: %w", err)
 	}