Update gosec.yml

akindemirsec · Apr 3, 2024 · 87414a2 · 87414a2
1 parent 1e3ba0c
commit 87414a2
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
@@ -19,9 +19,13 @@ jobs:
       - name: Generate SBOM
         id: sbom
         uses: anchore/sbom-action@v0 
-      
+
       - name: Run Gosec Security Scanner
-        id: gosec
+        id: GoSec Scan
         uses: securego/gosec@master
         with:
-          args: ./...
+          args: '-no-fail -fmt sarif -out results.sarif ./...'
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: results.sarif