fix: resolve gosec alerts in files this change touches

Code scanning reports alerts on every line of a touched file. Mark the
gRPC auth env var name and the mock backend's staged-path reads as
reviewed, and log the error when evicting a model after its connection
fails instead of dropping it.

Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

pkg/grpc/server.go

@@ -1098,7 +1098,7 @@ func NewBackendServer(model AIModel) pb.BackendServer {
 }
 
 // AuthTokenEnvVar is the environment variable used to configure gRPC bearer token auth.
-const AuthTokenEnvVar = "LOCALAI_GRPC_AUTH_TOKEN"
+const AuthTokenEnvVar = "LOCALAI_GRPC_AUTH_TOKEN" // #nosec G101 -- the name of an environment variable, not a credential
 
 // validateToken extracts the bearer token from gRPC metadata and validates it.
 func validateToken(ctx context.Context, expected string) error {

pkg/model/initializers.go

@@ -479,7 +479,9 @@ func (ml *ModelLoader) Load(opts ...Option) (grpc.Backend, error) {
 		// Wrap remote models so connection errors during inference trigger eviction
 		if m.Process() == nil {
 			client = newConnectionEvictingClient(client, o.modelID, func() {
-				ml.ShutdownModel(o.modelID)
+				if err := ml.ShutdownModel(o.modelID); err != nil {
+					xlog.Debug("evicting a model after its connection failed", "model", o.modelID, "error", err)
+				}
 			})
 		}
 		return client, nil
@@ -503,7 +505,9 @@ func (ml *ModelLoader) Load(opts ...Option) (grpc.Backend, error) {
 		// Wrap remote models so connection errors during inference trigger eviction
 		if m := ml.CheckIsLoaded(o.modelID); m != nil && m.Process() == nil {
 			client = newConnectionEvictingClient(client, o.modelID, func() {
-				ml.ShutdownModel(o.modelID)
+				if err := ml.ShutdownModel(o.modelID); err != nil {
+					xlog.Debug("evicting a model after its connection failed", "model", o.modelID, "error", err)
+				}
 			})
 		}
 		return client, nil
@@ -544,7 +548,9 @@ func (ml *ModelLoader) Load(opts ...Option) (grpc.Backend, error) {
 			// Wrap remote models so connection errors during inference trigger eviction
 			if m := ml.CheckIsLoaded(o.modelID); m != nil && m.Process() == nil {
 				model = newConnectionEvictingClient(model, o.modelID, func() {
-					ml.ShutdownModel(o.modelID)
+					if err := ml.ShutdownModel(o.modelID); err != nil {
+						xlog.Debug("evicting a model after its connection failed", "model", o.modelID, "error", err)
+					}
 				})
 			}
 			return model, nil