Update .gitea/workflows/security.yaml
This commit is contained in:
parent
26c50085d6
commit
47373c765c
@ -3,23 +3,9 @@ on: [push, pull_request] #runs on pushes to any branch
|
||||
|
||||
jobs:
|
||||
scans:
|
||||
runs-on: smoke-test
|
||||
runs-on: test
|
||||
steps:
|
||||
- name: "clone code"
|
||||
uses: actions/checkout@v4
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: "install go"
|
||||
uses: https://code.jakeyoungdev.com/actions/install-go@v0.1.3
|
||||
with:
|
||||
commands: |
|
||||
golang.org/x/vuln/cmd/govulncheck@latest
|
||||
|
||||
- name: "dependency and stdlib scan"
|
||||
uses: https://code.jakeyoungdev.com/actions/report-vulns@master
|
||||
with:
|
||||
manager: go
|
||||
|
||||
- name: "static code analysis"
|
||||
uses: securego/gosec@master
|
||||
with:
|
||||
args: ./...
|
||||
- name: "dependency scan and static code analysis"
|
||||
uses: https://code.jakeyoungdev.com/actions/donotpassgo@v1.0.0
|
Loading…
x
Reference in New Issue
Block a user