donotpassgo
donotpassgo is a composite workflow that runs security checks on Go projects. Go must be installed previous to this step.
Steps
govulncheck
govulncheck is installed using 'go install' and is used to scan the application dependencies and standard library.
gosec
gosec is used for static code analysis.
TODO
- Add support for unit tests
- Add ginkgo/gomega support