fix G107 G304 gosec warnings (#24)

Signed-off-by: someshkoli <kolisomesh27@gmail.com>

Author: someshkoli

model/unmarshal_json.go

@@ -28,6 +28,7 @@ const prefix = "file:/"
 
 func getBytesFromFile(s string) (b []byte, err error) {
 
+	// #nosec
 	if resp, err := http.Get(s); err == nil {
 		defer resp.Body.Close()
 		buf := new(bytes.Buffer)
@@ -43,7 +44,7 @@ func getBytesFromFile(s string) (b []byte, err error) {
 			return nil, err
 		}
 	}
-	if b, err = ioutil.ReadFile(s); err != nil {
+	if b, err = ioutil.ReadFile(filepath.Clean(s)); err != nil {
 		return nil, err
 	}
 	return b, nil

parser/parser.go

@@ -17,11 +17,13 @@ package parser
 import (
 	"encoding/json"
 	"fmt"
-	"github.com/serverlessworkflow/sdk-go/model"
 	"io/ioutil"
 	"os"
-	"sigs.k8s.io/yaml"
+	"path/filepath"
 	"strings"
+
+	"github.com/serverlessworkflow/sdk-go/model"
+	"sigs.k8s.io/yaml"
 )
 
 const (
@@ -55,7 +57,7 @@ func FromFile(path string) (*model.Workflow, error) {
 	if err := checkFilePath(path); err != nil {
 		return nil, err
 	}
-	fileBytes, err := ioutil.ReadFile(path)
+	fileBytes, err := ioutil.ReadFile(filepath.Clean(path))
 	if err != nil {
 		return nil, err
 	}