From 3b5554829fb908c6b0d89377636e6bc32c68ecf5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Jun 2026 20:02:20 +0000 Subject: [PATCH] chore(deps): bump securego/gosec Bumps [securego/gosec](https://github.com/securego/gosec) from 4ead098510926e1015958a36dc966bfcb7f6ee11 to caf8857bbd3276599d0176b0528e9712bb0b5bec. - [Release notes](https://github.com/securego/gosec/releases) - [Commits](https://github.com/securego/gosec/compare/4ead098510926e1015958a36dc966bfcb7f6ee11...caf8857bbd3276599d0176b0528e9712bb0b5bec) --- updated-dependencies: - dependency-name: securego/gosec dependency-version: caf8857bbd3276599d0176b0528e9712bb0b5bec dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/gosec.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml index f84f281..b9e8b55 100644 --- a/.github/workflows/gosec.yml +++ b/.github/workflows/gosec.yml @@ -22,7 +22,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run gosec - uses: securego/gosec@4ead098510926e1015958a36dc966bfcb7f6ee11 # master + uses: securego/gosec@caf8857bbd3276599d0176b0528e9712bb0b5bec # master with: # G104 (errcheck on logger Output) and G306 (public-key 0644) are # justified in code with //nolint:gosec; standalone gosec ignores