From 386a766185afdc9449a4676742e9aa5b92793433 Mon Sep 17 00:00:00 2001 From: jake Date: Sat, 10 May 2025 05:37:49 +0000 Subject: [PATCH] Update .gitea/workflows/security.yaml (#7) Reviewed-on: https://code.jakeyoungdev.com/jake/mctl/pulls/7 --- .gitea/workflows/security.yaml | 22 ++++------------------ 1 file changed, 4 insertions(+), 18 deletions(-) diff --git a/.gitea/workflows/security.yaml b/.gitea/workflows/security.yaml index 4004ab4..2f5dc31 100644 --- a/.gitea/workflows/security.yaml +++ b/.gitea/workflows/security.yaml @@ -3,23 +3,9 @@ on: [push, pull_request] #runs on pushes to any branch jobs: scans: - runs-on: smoke-test + runs-on: test steps: - - name: "clone code" - uses: actions/checkout@v4 - - - name: "install go" - uses: https://code.jakeyoungdev.com/actions/install-go@v0.1.3 - with: - commands: | - golang.org/x/vuln/cmd/govulncheck@latest + - uses: actions/checkout@v4 - - name: "dependency and stdlib scan" - uses: https://code.jakeyoungdev.com/actions/report-vulns@master - with: - manager: go - - - name: "static code analysis" - uses: securego/gosec@master - with: - args: ./... + - name: "dependency scan and static code analysis" + uses: https://code.jakeyoungdev.com/actions/donotpassgo@v1.0.0 \ No newline at end of file