Enable errcheck linter

.golangci.yaml

@@ -3,6 +3,7 @@ run:
 linters:
   disable-all: true
   enable:
+    - errcheck
     - gosimple
     - govet
     - ineffassign
@@ -54,6 +55,12 @@ linters-settings:
       - name: redefines-builtin-id
   testifylint:
     enable-all: true
+  errcheck:
+    exclude-functions:
+      - (*github.com/spf13/cobra.Command).Help
+      - (*github.com/spf13/cobra.Command).MarkFlagRequired
+      - (*github.com/spf13/pflag.FlagSet).MarkHidden
+      - (*github.com/spf13/pflag.FlagSet).MarkDeprecated
 issues:
   # Revive rules that are disabled by default.
   include:

src/internal/agent/http/admission/handler.go

@@ -124,6 +124,7 @@ func (h *Handler) Serve(hook operations.Hook) http.HandlerFunc {
 
 		message.Infof(lang.AgentInfoWebhookAllowed, r.URL.Path, review.Request.Operation, result.Allowed)
 		w.WriteHeader(http.StatusOK)
+		// nolint: errcheck // ignore
 		w.Write(jsonResponse)
 	}
 }

src/internal/agent/http/proxy.go

@@ -27,6 +27,7 @@ func ProxyHandler() http.HandlerFunc {
 		if err != nil {
 			message.Debugf("%#v", err)
 			w.WriteHeader(http.StatusInternalServerError)
+			// nolint: errcheck // ignore
 			w.Write([]byte(lang.AgentErrUnableTransform))
 			return
 		}

src/internal/agent/http/server.go

@@ -68,6 +68,7 @@ func NewProxyServer(port string) *http.Server {
 func healthz() http.HandlerFunc {
 	return func(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusOK)
+		// nolint: errcheck // ignore
 		w.Write([]byte("ok"))
 	}
 }

src/pkg/message/message.go

@@ -319,6 +319,7 @@ func Table(header []string, data [][]string) {
 		table = append(table, pterm.TableData{row}...)
 	}
 
+	// nolint:errcheck // never returns an error
 	pterm.DefaultTable.WithHasHeader().WithData(table).Render()
 }
 

src/pkg/packager/lint/lint.go

@@ -152,6 +152,7 @@ func fillComponentTemplate(validator *Validator, node *composer.Node, createOpts
 	// [DEPRECATION] Set the Package Variable syntax as well for backward compatibility
 	setVarsAndWarn(types.ZarfPackageVariablePrefix, true)
 
+	//nolint: errcheck // This error should bubble up
 	utils.ReloadYamlTemplate(node, templateMap)
 }
 

src/pkg/zoci/push.go

@@ -53,7 +53,10 @@ func (r *Remote) PublishPackage(ctx context.Context, pkg *types.ZarfPackage, pat
 
 	// assumes referrers API is not supported since OCI artifact
 	// media type is not supported
-	r.Repo().SetReferrersCapability(false)
+	err = r.Repo().SetReferrersCapability(false)
+	if err != nil {
+		return err
+	}
 
 	// push the manifest config
 	manifestConfigDesc, err := r.CreateAndPushManifestConfig(ctx, annotations, ZarfConfigMediaType)

src/test/nightly/ecr_publish_test.go

@@ -30,7 +30,8 @@ func TestECRPublishing(t *testing.T) {
 	t.Log("E2E: Testing component actions")
 
 	// Work from the root directory of the project
-	os.Chdir("../../../")
+	err := os.Chdir("../../../")
+	require.NoError(t, err)
 
 	// Create a tmpDir for us to use during this test
 	tmpDir := t.TempDir()