diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml index f626970ae3..9f6cc8c502 100644 --- a/.github/workflows/gosec.yml +++ b/.github/workflows/gosec.yml @@ -28,11 +28,9 @@ jobs: - name: Run Gosec Security Scanner uses: securego/gosec@master with: - # we let the report trigger content trigger a failure using the GitHub Security features. - args: "-exclude=G101,G107 -no-fail -fmt sarif -out results.sarif ./..." + args: "-exclude=G101,G107 -skip-files \".*(\\.pulsar\\.go|\\.pb\\.go)$\" -no-fail -fmt sarif -out results.sarif ./..." - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v2 with: - # Path to SARIF file relative to the root of the repository sarif_file: results.sarif