diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 73b31f5..b9ee403 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -41,3 +41,15 @@ jobs: run: | SCANNER="$(go env GOPATH)/bin/osv-scanner" $SCANNER --recursive --skip-git . || true + gosec: + name: gosec + runs-on: ubuntu-latest + env: + GO111MODULE: on + steps: + - name: Checkout Source + uses: actions/checkout@v3 + - name: Run Gosec Security Scanner + uses: securego/gosec@master + with: + args: ./...