Added CI that scans for Golang Vulnerabilities and code smells
The vulnerability scanning is performed by gosec, which is an open source security checker. The gosec package can be utilized through github actions and used in a workflow.
This commit is contained in:
parent
46f4078530
commit
c5ebde5de3
|
@ -0,0 +1,22 @@
|
|||
name: Security Scan - Gosec
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
|
||||
jobs:
|
||||
tests:
|
||||
runs-on: ubuntu-latest
|
||||
env:
|
||||
GO111MODULE: on
|
||||
steps:
|
||||
- name: Checkout Source
|
||||
uses: actions/checkout@v2
|
||||
- name: Run Gosec Security Scanner
|
||||
uses: securego/gosec@master
|
||||
with:
|
||||
args: ./...
|
Loading…
Reference in New Issue