style: инициализировать слайсы через make

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

pkg/adapters/crypto/composite/composite_test.go

@@ -18,6 +18,16 @@ import (
 	"git.tswf.io/infra/go-synapse-backupper/pkg/domain/crypto"
 )
 
+func makeRecipientPubs(pqPub, classicalPub crypto.RecipientPub) []crypto.RecipientPub {
+	pubs := make([]crypto.RecipientPub, 0, 2)
+	return append(pubs, pqPub, classicalPub)
+}
+
+func makeRecipientPrivs(pqPriv, classicalPriv crypto.RecipientPriv) []crypto.RecipientPriv {
+	privs := make([]crypto.RecipientPriv, 0, 2)
+	return append(privs, pqPriv, classicalPriv)
+}
+
 // ---------------------------------------------------------------------------
 // Test KEM harness
 //
@@ -286,7 +296,7 @@ func TestGoldenFormat(
 	out := &bytes.Buffer{}
 	if err := dec.Decrypt(
 		bytes.NewReader(goldenBytes),
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	); err != nil {
 		t.Fatalf("Decrypt(golden) failed: %v", err)
@@ -304,8 +314,8 @@ func TestRoundTrip(
 	for _, size := range sizes {
 		t.Run(fmt.Sprintf("size=%d", size), func(t *testing.T) {
 			plaintext := make([]byte, size)
-			for i := 0; i < size; i++ {
-				plaintext[i] = byte(i)
+			for index := 0; index < size; index++ {
+				plaintext[index] = byte(index)
 			}
 
 			reg := fakeRegistry(t)
@@ -318,7 +328,7 @@ func TestRoundTrip(
 			var encrypted bytes.Buffer
 			if err := enc.Encrypt(
 				bytes.NewReader(plaintext),
-				[]crypto.RecipientPub{pqPub, classicalPub},
+				makeRecipientPubs(pqPub, classicalPub),
 				&encrypted,
 				rand.Reader,
 			); err != nil {
@@ -328,7 +338,7 @@ func TestRoundTrip(
 			out := &bytes.Buffer{}
 			if err := dec.Decrypt(
 				bytes.NewReader(encrypted.Bytes()),
-				[]crypto.RecipientPriv{pqPriv, classicalPriv},
+				makeRecipientPrivs(pqPriv, classicalPriv),
 				out,
 			); err != nil {
 				t.Fatalf("Decrypt: %v", err)
@@ -354,7 +364,7 @@ func TestEmptyPlaintextSingleFinalChunk(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader(nil),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -394,7 +404,7 @@ func TestExactly64KiBTwoChunks(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader(plaintext),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -486,7 +496,7 @@ func TestTamperPayload(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader(plaintext),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -504,7 +514,7 @@ func TestTamperPayload(
 	out := &bytes.Buffer{}
 	err := dec.Decrypt(
 		bytes.NewReader(buf),
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	)
 	if !errors.Is(err, ErrTamperingDetected) {
@@ -526,7 +536,7 @@ func TestTamperWrappedCEK(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader([]byte{0xAA}),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -545,7 +555,7 @@ func TestTamperWrappedCEK(
 	out := &bytes.Buffer{}
 	err := dec.Decrypt(
 		bytes.NewReader(buf),
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	)
 	if !errors.Is(err, ErrTamperingDetected) {
@@ -575,7 +585,7 @@ func TestWrongPrivKey(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader([]byte{0x11, 0x22, 0x33}),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -605,7 +615,7 @@ func TestFormatConformance(
 	var out bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader([]byte{0x42}),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&out,
 		rand.Reader,
 	); err != nil {
@@ -649,7 +659,7 @@ func TestUnsupportedVersionNoGCM(
 	out := &bytes.Buffer{}
 	err := dec.Decrypt(
 		reader,
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	)
 	if !errors.Is(err, ErrUnsupportedVersion) {
@@ -723,7 +733,7 @@ func TestMalformedHeaderCtLenOverflow(
 		_, classicalPriv := generateFakeKeyPair(t, fakeRegistry(t), fakeClassicalSchemeID, rand.Reader)
 		err := dec.Decrypt(
 			reader,
-			[]crypto.RecipientPriv{pqPriv, classicalPriv},
+			makeRecipientPrivs(pqPriv, classicalPriv),
 			&bytes.Buffer{},
 		)
 		if !errors.Is(err, ErrMalformedHeader) {
@@ -754,7 +764,7 @@ func TestZeroLengthNonFinalChunk(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader([]byte{0xAA}),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -770,7 +780,7 @@ func TestZeroLengthNonFinalChunk(
 	out := &bytes.Buffer{}
 	err := dec.Decrypt(
 		bytes.NewReader(corrupt.Bytes()),
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	)
 	if !errors.Is(err, ErrMalformedChunk) {
@@ -792,7 +802,7 @@ func TestOversizedChunk(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader([]byte{0xAA}),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -808,7 +818,7 @@ func TestOversizedChunk(
 	out := &bytes.Buffer{}
 	err := dec.Decrypt(
 		bytes.NewReader(corrupt.Bytes()),
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	)
 	if !errors.Is(err, ErrMalformedChunk) {
@@ -833,7 +843,7 @@ func TestPrematureEOF(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader(plaintext),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rand.Reader,
 	); err != nil {
@@ -853,7 +863,7 @@ func TestPrematureEOF(
 	out := &bytes.Buffer{}
 	err := dec.Decrypt(
 		bytes.NewReader(encrypted.Bytes()[:truncatedLen]),
-		[]crypto.RecipientPriv{pqPriv, classicalPriv},
+		makeRecipientPrivs(pqPriv, classicalPriv),
 		out,
 	)
 	if !errors.Is(err, ErrUnexpectedEOF) {

pkg/adapters/crypto/composite/golden_generate_test.go

@@ -88,7 +88,7 @@ func TestGenerateGoldenFixture(
 	var encrypted bytes.Buffer
 	if err := enc.Encrypt(
 		bytes.NewReader([]byte{0xAA}),
-		[]crypto.RecipientPub{pqPub, classicalPub},
+		makeRecipientPubs(pqPub, classicalPub),
 		&encrypted,
 		rng,
 	); err != nil {

pkg/adapters/pgdump/pgdump_test.go

@@ -44,10 +44,8 @@ func mockCommandContext(
 }
 
 func TestDump_Success(t *testing.T) {
-	wantArgs := []string{
-		"--format=custom",
-		"--exclude-table=e2e_one_time_keys_json",
-	}
+	wantArgs := make([]string, 0, 2)
+	wantArgs = append(wantArgs, "--format=custom", "--exclude-table=e2e_one_time_keys_json")
 
 	adapter := &adapter{
 		commandContext: mockCommandContext(
@@ -78,10 +76,8 @@ func TestDump_Success(t *testing.T) {
 func TestDump_WaitAfterStdoutEOF(t *testing.T) {
 	// This test verifies that after io.Copy returns (stdout EOF),
 	// cmd.Wait() is called and the exit code is verified before returning.
-	wantArgs := []string{
-		"--format=custom",
-		"--exclude-table=e2e_one_time_keys_json",
-	}
+	wantArgs := make([]string, 0, 2)
+	wantArgs = append(wantArgs, "--format=custom", "--exclude-table=e2e_one_time_keys_json")
 
 	adapter := &adapter{
 		commandContext: mockCommandContext(
@@ -110,10 +106,8 @@ func TestDump_WaitAfterStdoutEOF(t *testing.T) {
 }
 
 func TestDump_NonZeroExitCode(t *testing.T) {
-	wantArgs := []string{
-		"--format=custom",
-		"--exclude-table=e2e_one_time_keys_json",
-	}
+	wantArgs := make([]string, 0, 2)
+	wantArgs = append(wantArgs, "--format=custom", "--exclude-table=e2e_one_time_keys_json")
 
 	adapter := &adapter{
 		commandContext: mockCommandContext(
@@ -200,10 +194,8 @@ func TestDump_ContextCancellation(t *testing.T) {
 }
 
 func TestDump_DefaultExcludeTables(t *testing.T) {
-	wantArgs := []string{
-		"--format=custom",
-		"--exclude-table=e2e_one_time_keys_json",
-	}
+	wantArgs := make([]string, 0, 2)
+	wantArgs = append(wantArgs, "--format=custom", "--exclude-table=e2e_one_time_keys_json")
 
 	adapter := &adapter{
 		commandContext: mockCommandContext(
@@ -227,11 +219,8 @@ func TestDump_DefaultExcludeTables(t *testing.T) {
 }
 
 func TestDump_CustomExcludeTables(t *testing.T) {
-	wantArgs := []string{
-		"--format=custom",
-		"--exclude-table=table_a",
-		"--exclude-table=table_b",
-	}
+	wantArgs := make([]string, 0, 3)
+	wantArgs = append(wantArgs, "--format=custom", "--exclude-table=table_a", "--exclude-table=table_b")
 
 	adapter := &adapter{
 		commandContext: mockCommandContext(
@@ -288,12 +277,10 @@ func TestDump_EnvVars(t *testing.T) {
 		t.Errorf("PGPASSWORD must not be passed to pg_dump subprocess")
 	}
 
-	wantEnvVars := []string{
-		"PGHOST=myhost",
-		"PGPORT=5433",
-		"PGUSER=myuser",
-		"PGDATABASE=mydb",
-	}
+	wantEnvVars := make([]string, 0, 4)
+
+	wantEnvVars = append(wantEnvVars, "PGHOST=myhost", "PGPORT=5433", "PGUSER=myuser", "PGDATABASE=mydb")
+
 	for _, wantEnv := range wantEnvVars {
 		if !strings.Contains(envStr, wantEnv) {
 			t.Errorf("env missing %q", wantEnv)