Run Gosec and ZAP Scan #14

	name: Run Gosec and ZAP Scan
	on:
	workflow_dispatch:
	jobs:
	tests:
	runs-on: ubuntu-latest
	env:
	GO111MODULE: on
	steps:
	- name: Set up Nodejs
	uses: actions/setup-node@v3
	with:
	node-version: 20

	- name: Checkout Source
	id: checkout
	uses: actions/checkout@v3

	- name: Generate SBOM
	id: sbom
	uses: anchore/sbom-action@v0

	- name: Run Gosec Security Scanner
	id: GoSec Scan
Check failure on line 24 in .github/workflows/gosec.yml View workflow run for this annotation GitHub Actions / Run Gosec and ZAP Scan Invalid workflow file `The workflow is not valid. .github/workflows/gosec.yml (Line: 24, Col: 13): The identifier 'GoSec Scan' is invalid. IDs may only contain alphanumeric characters, '_', and '-'. IDs must start with a letter or '_' and and must be less than 100 characters.`
	uses: securego/gosec@master
	with:
	args: '-no-fail -fmt sarif -out results.sarif ./...'
	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: results.sarif

Provide feedback