Add linter rule to guard against use of os.Is* error functions

Author: curdbecker

.golangci.yml

@@ -1,5 +1,4 @@
 version: "2"
-
 run:
   build-tags:
     - seccomp
@@ -37,6 +36,12 @@ linters:
         # going to be tricked into overwriting host files.
         - pattern: ^os\.Create$
           pkg: ^os$
+        # os.Is* error checking functions predate errors.Is. Therefore, they
+        # only support errors returned by the os package and subtly fail
+        # to deal with other wrapped error types.
+        # New code should use errors.Is(err, error-type) instead.
+        - pattern: ^os\.Is(Exist|NotExist|Permission|Timeout)$
+          pkg: ^os$
       analyze-types: true
   exclusions:
     rules: