chore: add security
This commit is contained in:
@@ -57,7 +57,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Upload Trivy SARIF
|
- name: Upload Trivy SARIF
|
||||||
if: always()
|
if: always()
|
||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v4
|
||||||
with:
|
with:
|
||||||
sarif_file: trivy-results.sarif
|
sarif_file: trivy-results.sarif
|
||||||
|
|
||||||
@@ -74,14 +74,15 @@ jobs:
|
|||||||
go-version: "1.24.4"
|
go-version: "1.24.4"
|
||||||
cache-dependency-path: backend/gestion/go.sum
|
cache-dependency-path: backend/gestion/go.sum
|
||||||
|
|
||||||
|
- name: Install gosec
|
||||||
|
run: go install github.com/securego/gosec/v2/cmd/gosec@latest
|
||||||
|
|
||||||
- name: Run gosec
|
- name: Run gosec
|
||||||
uses: securego/gosec@master
|
|
||||||
with:
|
|
||||||
args: -fmt sarif -out gosec-results.sarif -exclude-dir=vendor ./...
|
|
||||||
working-directory: backend/gestion
|
working-directory: backend/gestion
|
||||||
|
run: gosec -fmt sarif -out gosec-results.sarif ./...
|
||||||
|
|
||||||
- name: Upload gosec SARIF
|
- name: Upload gosec SARIF
|
||||||
if: always()
|
if: always()
|
||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v4
|
||||||
with:
|
with:
|
||||||
sarif_file: backend/gestion/gosec-results.sarif
|
sarif_file: backend/gestion/gosec-results.sarif
|
||||||
|
|||||||
Reference in New Issue
Block a user