Raise the golinter bar.

api/internal/plugins/execplugin/execplugin.go

@@ -157,6 +157,7 @@ func (p *ExecPlugin) invokePlugin(input []byte) ([]byte, error) {
 		return nil, errors.Wrap(
 			err, "closing plugin config file "+f.Name())
 	}
+	//nolint:gosec
 	cmd := exec.Command(
 		p.path, append([]string{f.Name()}, p.args...)...)
 	cmd.Env = p.getEnv()

api/internal/plugins/loader/loader_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 const (
+	//nolint:gosec
 	secretGenerator = `
 apiVersion: builtin
 kind: SecretGenerator