{"record":{"id":"535ff223efa397b2","repo":"JuliusBrussee/caveman","slug":"sqlite-parent-q-is-group-world-writable","errorCode":null,"errorMessage":"sqlite parent %q is group/world writable","messagePattern":"sqlite parent %q is group/world writable","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"engine/ccr/sqlite_parent_security_posix.go","lineNumber":14,"sourceCode":"//go:build !windows && !js\n\npackage ccr\n\nimport (\n\t\"fmt\"\n\t\"os\"\n)\n\nfunc validateSQLiteParentSecurity(path string, info os.FileInfo) error {\n\t// Sticky shared temp directories (/tmp, macOS /private/tmp) prevent another\n\t// user from replacing the 0600 file. Other group/world-writable parents do not.\n\tif info.Mode().Perm()&0o022 != 0 && info.Mode()&os.ModeSticky == 0 {\n\t\treturn fmt.Errorf(\"sqlite parent %q is group/world writable\", path)\n\t}\n\treturn nil\n}\n","sourceCodeStart":1,"sourceCodeEnd":18,"githubUrl":"https://github.com/JuliusBrussee/caveman/blob/27d5a3981a347890211bb1bf2439e5c821a63bc9/engine/ccr/sqlite_parent_security_posix.go#L1-L18","documentation":"Error \"sqlite parent %q is group/world writable\" thrown in JuliusBrussee/caveman.","triggerScenarios":"Thrown at engine/ccr/sqlite_parent_security_posix.go:14 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Tighten permissions on the sqlite parent directory (remove group/world write)."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"27d5a3981a347890211bb1bf2439e5c821a63bc9","analyzedAt":"2026-08-15T09:26:11.751Z","schemaVersion":2},"datasetVersion":"2026-08-15T17:31:12.345Z"}