cerc-io/laconicd-deprecated
19
0
Fork 1
Code Issues 21 Pull Requests Actions Packages Projects Releases 3 Wiki Activity

ci: enable gosec sarif upload (#776)

Browse Source 
* ci: enable gosec sarif upload

* Update .github/workflows/security.yml

Co-authored-by: Federico Kunze Küllmer <31522760+fedekunze@users.noreply.github.com>
This commit is contained in:
Prajjwol Gautam 2021-11-24 03:42:47 -08:00 committed by GitHub
parent 2bf2b6758b
commit afe15fefe4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
.github/workflows/security.yml vendored
View File

@ -1,34 +1,34 @@
name: Run Gosec name: Run Gosec
on: on:
pull_request:
push: push:
branches: branches:
- main - main
pull_request:
branches:
- '**'
jobs: jobs:
tests: Gosec:
runs-on: ubuntu-latest runs-on: ubuntu-latest
env: env:
GO111MODULE: on GO111MODULE: on
steps: steps:
- name: Checkout Source - name: Checkout Source
uses: actions/checkout@v2.4.0 uses: actions/checkout@v2.4.0
# - uses: technote-space/get-diff-action@v5 - name: Get Diff
# with: uses: technote-space/get-diff-action@v5
# SUFFIX_FILTER: | with:
# .go PATTERNS: |
# .mod **/*.go
# .sum go.mod
go.sum
- name: Run Gosec Security Scanner - name: Run Gosec Security Scanner
uses: informalsystems/gosec@master uses: informalsystems/gosec@master
with: with:
args: ./...
# we let the report trigger content trigger a failure using the GitHub Security features. # we let the report trigger content trigger a failure using the GitHub Security features.
# args: '-no-fail -fmt sarif -out results.sarif ./...' args: '-no-fail -fmt sarif -out results.sarif ./...'
# - name: Upload SARIF file if: "env.GIT_DIFF_FILTERED != ''"
# uses: github/codeql-action/upload-sarif@v1 - name: Upload SARIF file
# with: uses: github/codeql-action/upload-sarif@v1
# # Path to SARIF file relative to the root of the repository with:
# sarif_file: results.sarif # Path to SARIF file relative to the root of the repository
# if: "env.GIT_DIFF != ''" sarif_file: results.sarif
if: "env.GIT_DIFF_FILTERED != ''"