From 1b44fd3d2bf168c942c10faf76c73d24695f9b36 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Feb 2024 18:49:11 +0000 Subject: [PATCH] chore(deps): bump securego/gosec from 2.17.0 to 2.19.0 Bumps [securego/gosec](https://github.com/securego/gosec) from 2.17.0 to 2.19.0. - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](https://github.com/securego/gosec/compare/v2.17.0...v2.19.0) --- updated-dependencies: - dependency-name: securego/gosec dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/pull.yml | 2 +- .github/workflows/push.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml index daa35b3d35..be3a5d8b97 100644 --- a/.github/workflows/pull.yml +++ b/.github/workflows/pull.yml @@ -124,7 +124,7 @@ jobs: with: go-version: ${{ env.GO_VERSION }} - uses: actions/checkout@v3 - - uses: securego/gosec@v2.17.0 + - uses: securego/gosec@v2.19.0 with: args: -fmt=json -out=results-$JOB_ID.json -no-fail ./... diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 32ad7f5de6..992ede5e5b 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -35,7 +35,7 @@ jobs: go-version: ${{ env.GO_VERSION }} - uses: actions/checkout@v3 - name: Run Gosec Security Scanner - uses: securego/gosec@v2.17.0 + uses: securego/gosec@v2.19.0 with: args: -fmt=json -out=results-$JOB_ID.json -no-fail ./...