Added CI that scans for Golang Vulnerabilities and code smells

The vulnerability scanning is performed by gosec, which is an open source security checker.
The gosec package can be utilized through github actions and used in a workflow.
This commit is contained in:
RajathInuganti 2022-02-19 12:14:23 -08:00
parent 46f4078530
commit c5ebde5de3
1 changed files with 22 additions and 0 deletions

22
.github/workflows/security-check.yml vendored Normal file
View File

@ -0,0 +1,22 @@
name: Security Scan - Gosec
on:
push:
branches:
- main
pull_request:
branches:
- main
jobs:
tests:
runs-on: ubuntu-latest
env:
GO111MODULE: on
steps:
- name: Checkout Source
uses: actions/checkout@v2
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: ./...