24 lines
540 B
YAML
24 lines
540 B
YAML
name: "test scans"
|
|
on: push #runs on pushes to any branch
|
|
|
|
jobs:
|
|
scans:
|
|
runs-on: smoke-test
|
|
steps:
|
|
- name: "clone code"
|
|
uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: go.mod
|
|
|
|
- name: "dependency and stdlib scan"
|
|
uses: golang/govulncheck-action@v1.0.4
|
|
with:
|
|
go-version-file: go.mod
|
|
go-package: ./...
|
|
|
|
- name: "static code analysis"
|
|
uses: securego/gosec@v2.22.3
|
|
with:
|
|
args: ./... |