ci: add gosec for golang security scanning

Adding gosec security scanning as a CI job to run on each PR to ensure we are good with security problems. More details at https://github.com/securego/gosec Signed-off-by: Madhu Rajanna <[email protected]>
ceph · Mar 1, 2024 · c821aea · c821aea
1 parent 328e4e5
commit c821aea
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/.github/workflows/gosec.yaml b/.github/workflows/gosec.yaml
@@ -0,0 +1,19 @@
+---
+name: Run Gosec
+# yamllint disable-line rule:truthy
+on:
+  pull_request:
+    branches:
+      - devel
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    env:
+      GO111MODULE: on
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v4
+      - name: Run Gosec Security Scanner
+        uses: securego/gosec@master
+        with:
+          args: ./...