chore: add security
This commit is contained in:
@@ -57,7 +57,7 @@ jobs:
|
||||
|
||||
- name: Upload Trivy SARIF
|
||||
if: always()
|
||||
uses: github/codeql-action/upload-sarif@v3
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
with:
|
||||
sarif_file: trivy-results.sarif
|
||||
|
||||
@@ -74,14 +74,15 @@ jobs:
|
||||
go-version: "1.24.4"
|
||||
cache-dependency-path: backend/gestion/go.sum
|
||||
|
||||
- name: Install gosec
|
||||
run: go install github.com/securego/gosec/v2/cmd/gosec@latest
|
||||
|
||||
- name: Run gosec
|
||||
uses: securego/gosec@master
|
||||
with:
|
||||
args: -fmt sarif -out gosec-results.sarif -exclude-dir=vendor ./...
|
||||
working-directory: backend/gestion
|
||||
working-directory: backend/gestion
|
||||
run: gosec -fmt sarif -out gosec-results.sarif ./...
|
||||
|
||||
- name: Upload gosec SARIF
|
||||
if: always()
|
||||
uses: github/codeql-action/upload-sarif@v3
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
with:
|
||||
sarif_file: backend/gestion/gosec-results.sarif
|
||||
|
||||
Reference in New Issue
Block a user