Skip to content

chore(deps): update module sigs.k8s.io/e2e-framework to v0.6.0 (#886) #878

chore(deps): update module sigs.k8s.io/e2e-framework to v0.6.0 (#886)

chore(deps): update module sigs.k8s.io/e2e-framework to v0.6.0 (#886) #878

Workflow file for this run

name: Scan CVEs - Gosec
permissions:
contents: read
on:
push:
branches:
- main
pull_request:
branches:
- main
jobs:
tests:
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
env:
GO111MODULE: on
steps:
- name: Checkout Source
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Setup golang
uses: ./.github/actions/golang
- name: Install gosec
run: |
go install github.com/securego/gosec/v2/cmd/[email protected]
- name: Run Gosec Security Scanner
run: |
gosec -stdout -fmt sarif -out results.sarif ./...
- name: Upload artifact
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: SARIF file
path: results.sarif
retention-days: 5
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: results.sarif