actions/donotpassgo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

testing better logging

Browse Source
This commit is contained in:
jake 2025-05-10 01:26:25 -04:00
parent b1003750eb
commit b64b107527
2 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md Normal file
View File

@ -0,0 +1,3 @@
# donotpassgo
action to run general go code scans, includes dependency scan with govulncheck and static code analysis from gosec

10
action.yaml
View File

@ -6,11 +6,9 @@ runs:
- name: "install go packages" - name: "install go packages"
run: | run: |
go install golang.org/x/vuln/cmd/govulncheck@latest go install golang.org/x/vuln/cmd/govulncheck@latest
go install github.com/securego/gosec/v2/cmd/gosec@latest
- name: "dependency scan" - name: "dependency scan"
run: govulncheck ./... run: |
govulncheck ./...
- name: "static code analysis" gosec ./...
uses: securego/gosec@master
with:
args: ./...