From 61429731512942976740a767d066d79a067fc967 Mon Sep 17 00:00:00 2001 From: schen6318 <149955676+schen6318@users.noreply.github.com> Date: Tue, 1 Apr 2025 14:30:26 -0400 Subject: [PATCH 1/2] chore(ci): add Gosec security scanner workflow for sec-project branch --- .github/workflows/ci-gosec.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .github/workflows/ci-gosec.yml diff --git a/.github/workflows/ci-gosec.yml b/.github/workflows/ci-gosec.yml new file mode 100644 index 000000000000..7a4611d084ae --- /dev/null +++ b/.github/workflows/ci-gosec.yml @@ -0,0 +1,20 @@ +name: Run Gosec +on: + push: + branches: + - sec-project + pull_request: + branches: + - sec-project +jobs: + tests: + runs-on: ubuntu-latest + env: + GO111MODULE: on + steps: + - name: Checkout Source + uses: actions/checkout@v3 + - name: Run Gosec Security Scanner + uses: securego/gosec@master + with: + args: ./... From ba0746e23596b54982a9e42ee6fc0a8fcecc1af4 Mon Sep 17 00:00:00 2001 From: schen6318 <149955676+schen6318@users.noreply.github.com> Date: Tue, 1 Apr 2025 16:47:24 -0400 Subject: [PATCH 2/2] chore(ci): update Gosec workflow to trigger on master branch --- .github/workflows/ci-gosec.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-gosec.yml b/.github/workflows/ci-gosec.yml index 7a4611d084ae..66493f141437 100644 --- a/.github/workflows/ci-gosec.yml +++ b/.github/workflows/ci-gosec.yml @@ -2,10 +2,10 @@ name: Run Gosec on: push: branches: - - sec-project + - master pull_request: branches: - - sec-project + - master jobs: tests: runs-on: ubuntu-latest