add goSec, go-lint, update actions #2

Merged
lerentis merged 4 commits from add-gosec-scan into main 2025-10-09 15:47:41 +00:00
3 changed files with 35 additions and 11 deletions
Showing only changes of commit 1d39b1d214 - Show all commits

View File

@@ -10,13 +10,21 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v5
- name: Setup Go - name: Setup Go
uses: actions/setup-go@v5 uses: actions/setup-go@v6
with: with:
go-version: '1.24.x' go-version: '1.24.x'
- name: golangci-lint
uses: golangci/golangci-lint-action@v8
with:
version: v2.1
- name: Test with the Go CLI - name: Test with the Go CLI
run: go test ./... run: go test ./... -v
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: ./...
Build_Image: Build_Image:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
@@ -46,4 +54,4 @@ jobs:
# - name: Sign the published Docker image # - name: Sign the published Docker image
# env: # env:
# COSIGN_EXPERIMENTAL: "true" # COSIGN_EXPERIMENTAL: "true"
# run: cosign sign lerentis/canada-kaktus:${{ github.sha }}@${{ steps.build-and-push.outputs.digest }} # run: cosign sign lerentis/canada-kaktus:${{ github.sha }}@${{ steps.build-and-push.outputs.digest }}

View File

@@ -7,13 +7,21 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v5
- name: Setup Go - name: Setup Go
uses: actions/setup-go@v5 uses: actions/setup-go@v6
with: with:
go-version: '1.24.x' go-version: '1.24.x'
- name: golangci-lint
uses: golangci/golangci-lint-action@v8
with:
version: v2.1
- name: Test with the Go CLI - name: Test with the Go CLI
run: go test ./... run: go test ./... -v
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: ./...
Build_Image: Build_Image:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:

View File

@@ -7,13 +7,21 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v5
- name: Setup Go - name: Setup Go
uses: actions/setup-go@v5 uses: actions/setup-go@v6
with: with:
go-version: '1.24.x' go-version: '1.24.x'
- name: golangci-lint
uses: golangci/golangci-lint-action@v8
with:
version: v2.1
- name: Test with the Go CLI - name: Test with the Go CLI
run: go test ./... run: go test ./... -v
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: ./...
Build_Image: Build_Image:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
@@ -43,4 +51,4 @@ jobs:
# - name: Sign the published Docker image # - name: Sign the published Docker image
# env: # env:
# COSIGN_EXPERIMENTAL: "true" # COSIGN_EXPERIMENTAL: "true"
# run: cosign sign lerentis/canada-kaktus:${{ github.event.release.tag_name }}@${{ steps.build-and-push.outputs.digest }} # run: cosign sign lerentis/canada-kaktus:${{ github.event.release.tag_name }}@${{ steps.build-and-push.outputs.digest }}