From bce46039e44936125f584b37432120679cf0cb69 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ak=C4=B1n=20Demir?= <128565483+GrimezSec@users.noreply.github.com> Date: Fri, 29 Mar 2024 15:31:13 +0300 Subject: [PATCH] Update and rename main.yml to gosec.yml --- .github/workflows/gosec.yml | 25 +++++++++++++++++++++++++ .github/workflows/main.yml | 18 ------------------ 2 files changed, 25 insertions(+), 18 deletions(-) create mode 100644 .github/workflows/gosec.yml delete mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml new file mode 100644 index 0000000..cd84fba --- /dev/null +++ b/.github/workflows/gosec.yml @@ -0,0 +1,25 @@ +name: GoSecTest + +on: + push: + branches: + - main + +jobs: + tests: + runs-on: ubuntu-latest + env: + GO111MODULE: on + steps: + - name: Checkout Source + uses: actions/checkout@v3 + - name: Run Gosec Security Scanner + uses: securego/gosec@master + with: + # we let the report trigger content trigger a failure using the GitHub Security features. + args: '-no-fail -fmt sarif -out results.sarif ./...' + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v2 + with: + # Path to SARIF file relative to the root of the repository + sarif_file: results.sarif diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml deleted file mode 100644 index a6ac7dc..0000000 --- a/.github/workflows/main.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: GoSecTest - -on: - push: - branches: - - main - -jobs: - GoSecScan: - name: GoSec Scan - runs-on: ubuntu-latest - - steps: - - name: Gosec Security Checker - uses: securego/gosec@v2.18.2 - with: - # Arguments for gosec - args: ""