{"record":{"id":"e012789e389d67f0","repo":"deepseek-ai/deepseek-harness","slug":"credentials-local-filename-is-readable-beyond","errorCode":null,"errorMessage":"credentials-local: ${filename} is readable beyond its owner (mode ${(mode & 0o777).toString(8)}); run \"chmod 600 ${filename}\" before starting again","messagePattern":"credentials-local: (.+?) is readable beyond its owner \\(mode (.+?)\\); run \"chmod 600 (.+?)\" before starting again","errorType":"validation","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"packages/credentials/credentials-local/src/index.ts","lineNumber":141,"sourceCode":" * there is whatever the create and replace APIs express.\n * @param filename - absolute path of the document.\n * @throws when the path hierarchy is invalid or the file exists with group or other permission bits set.\n */\nasync function assertOwnerOnly(filename: string): Promise<void> {\n  let mode: number\n  try {\n    mode = (await stat(filename)).mode\n  } catch (error) {\n    if (!isENOENT(error)) throw error\n    await canonicalizeWatchPath(filename)\n    return\n  }\n  /* v8 ignore next -- POSIX coverage cannot take the Windows peer; native Windows coverage does. */\n  if (process.platform === 'win32') return\n  /* v8 ignore start -- Windows has no POSIX mode enforcement; POSIX behavior tests enforce this peer. */\n  const offending = mode & GROUP_OTHER_BITS\n  if (offending === 0) return\n  throw new Error(\n    `credentials-local: ${filename} is readable beyond its owner (mode ${(mode & 0o777).toString(8)});`\n    + ` run \"chmod 600 ${filename}\" before starting again`,\n  )\n  /* v8 ignore stop */\n}\n\n/** Whether a filesystem error means absence; every non-ENOENT failure must surface. */\nfunction isENOENT(error: unknown): boolean {\n  return (error as NodeJS.ErrnoException | null)?.code === 'ENOENT'\n}\n\n/**\n * Describe one YAML parse failure without quoting the source. The parser's own\n * message embeds the offending line, which here holds a secret.\n * @param error - the parser's error.\n * @returns the error code with its line and column.\n */\nfunction describeYamlError(error: YAMLError): string {","sourceCodeStart":123,"sourceCodeEnd":159,"githubUrl":"https://github.com/deepseek-ai/deepseek-harness/blob/b150a551b8d465e31e418e1b2eaf5e79bbb7d28e/packages/credentials/credentials-local/src/index.ts#L123-L159","documentation":"Error \"credentials-local: ${filename} is readable beyond its owner (mode ${(mode & 0o777).toString(8)}); run \"chmod 600 ${filename}\" before starting again\" thrown in deepseek-ai/deepseek-harness.","triggerScenarios":"Thrown at packages/credentials/credentials-local/src/index.ts:141 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b150a551b8d465e31e418e1b2eaf5e79bbb7d28e","analyzedAt":"2026-08-24T18:12:29.105Z","schemaVersion":2},"datasetVersion":"2026-08-24T22:17:12.610Z"}