Skip to content

docs(changelog): update changelog for main (#1424) #1218

docs(changelog): update changelog for main (#1424)

docs(changelog): update changelog for main (#1424) #1218

Workflow file for this run

---
name: Run Security Checks
on:
push:
branches: [main]
pull_request:
branches: [main]
paths:
- cmd/**
- pkg/**
- internal/**
- main.go
- go.mod
- go.sum
env:
OUTPUT_FILE: results.sarif
jobs:
gosec:
name: Golang Security Checker
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- name: Checkout Source
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
persist-credentials: false
- name: Run Gosec Security Scanner
uses: securego/gosec@bb17e422fc34bf4c0a2e5cab9d07dc45a68c040c # v2.24.7
with:
args: "-no-fail -fmt sarif -out results.sarif ./..."
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4
with:
# Path to SARIF file relative to the root of the repository
sarif_file: results.sarif
govulncheck:
name: govulncheck
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- id: govulncheck
uses: nicholas-fedor/govulncheck-action@4878bd2662232e5dac6408f44026e584ba0e3a66
with:
output-format: sarif
output-file: ${{ env.OUTPUT_FILE }}
go-version-file: "go.mod"
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4
with:
sarif_file: ${{ env.OUTPUT_FILE }}