Gosec with some stuff with actions.
Find a file
2024-09-11 20:02:44 -04:00
.forgejo/workflows update readme 2024-09-11 19:13:30 -04:00
cmd remove excess logging 2024-09-11 19:11:34 -04:00
.actrc log cwd to see if anything is going wrong 2024-09-06 17:33:50 -04:00
.gitignore add parsing of sarif file and outputting markdown 2024-09-05 23:04:11 -04:00
action.yml use inputs to get token 2024-09-06 21:32:20 -04:00
build.sh add action summary, build steps 2024-09-06 10:03:37 -04:00
Dockerfile actually make the container multi-arch 2024-09-11 20:02:44 -04:00
entrypoint.sh download gosec at build 2024-09-08 14:57:55 -04:00
example.sarif add parsing of sarif file and outputting markdown 2024-09-05 23:04:11 -04:00
go.mod update go sum 2024-09-06 21:35:46 -04:00
go.sum update go sum 2024-09-06 21:35:46 -04:00
LICENSE Initial commit 2024-09-05 16:30:50 +01:00
main.go add parsing of sarif file and outputting markdown 2024-09-05 23:04:11 -04:00
README.md update readme 2024-09-11 19:13:30 -04:00

goscan

Gosec with some stuff with actions.

Workflow example

name: GoSec Scan
on:
  schedule:
    - cron: "@daily"
  push:
    branches: ["main"]
  workflow_dispatch:

jobs:
  gosec:
    name: Gosec Check
    runs-on: node20-bookworm
    steps:
      - name: Checkout
        uses: https://git.shadowhosting.xyz/actions/checkout@v4
      - uses: https://git.shadowhosting.xyz/actions/setup-go@v5
        with:
          go-version: '1.22'
      - run: go mod download
      - name: Run Gosec Security Scanner
        uses: https://git.shadowhosting.xyz/actions/goscan@main