Skip to content

Commit bac285b

Browse files
committed
update scan task
1 parent ce151c4 commit bac285b

File tree

1 file changed

+1
-19
lines changed

1 file changed

+1
-19
lines changed

.github/workflows/security_scan.yml

Lines changed: 1 addition & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -10,31 +10,13 @@ permissions:
1010
security-events: write
1111

1212
jobs:
13-
gosec_zizmor:
13+
zizmor:
1414
name: security scan
1515
runs-on: ubuntu-latest
1616
steps:
1717
- uses: actions/checkout@v6
1818
with:
1919
persist-credentials: false
20-
- uses: actions/setup-go@v6
21-
with:
22-
go-version: stable
23-
- name: Run Gosec Security Scanner
24-
uses: securego/gosec@6be2b51fd78feca86af91f5186b7964d76cb1256 # v2.22.10
25-
with:
26-
args: "-no-fail -fmt json -out results.json ./..."
27-
28-
- name: Check Gosec Results
29-
run: |
30-
FOUND=$(jq '.Stats.found // 0' results.json)
31-
echo "Gosec found $FOUND issue(s)"
32-
if [ "$FOUND" -gt 0 ]; then
33-
echo "❌ Security issues detected! Please fix them before merging."
34-
exit 1
35-
else
36-
echo "✅ No security issues found."
37-
fi
3820

3921
- name: Run zizmor 🌈
4022
uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0

0 commit comments

Comments
 (0)