donotpassgo
A composite workflow that runs security checks on Go projects. Golang must be installed before this workflow can run.
Steps
govulncheck
govulncheck is installed using 'go install' and is used to scan the application dependencies and standard library.
gosec
gosec is used for static code analysis.
TODO
- Add support for unit tests
- Add ginkgo/gomega support