name: Gosec Check
on:
  push:
    branches: ["main"]
  workflow_dispatch:

jobs:
  gosec:
    name: Gosec Check
    runs-on: node20-bookworm
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: '1.21'
      - run: go mod download && go install github.com/a-h/templ/cmd/templ@latest
      - run: templ generate
      - name: Run Gosec Security Scanner
        uses: actions/goscan@main