1name: Security
2on:
3 push:
4 branches:
5 - main
6 pull_request:
7 branches:
8 - main
9permissions:
10 contents: read
11jobs:
12 scan:
13 strategy:
14 matrix:
15 go: ['1.20','1.21']
16 fail-fast: true
17 runs-on: ubuntu-latest
18 steps:
19 - name: Checkout Code
20 uses: actions/checkout@v3
21
22 - name: Setup Go ${{ matrix.go }}
23 uses: actions/setup-go@v4
24 with:
25 go-version: ${{ matrix.go }}
26 cache: false
27
28 - name: Run GoSec
29 uses: securego/gosec@master
30 with:
31 args: -exclude-dir examples ./...
32
33 - name: Run GoVulnCheck
34 uses: golang/govulncheck-action@v1
35 with:
36 go-version-input: ${{ matrix.go }}
37 go-package: ./...
View as plain text