Skip to content

Added nosec directive for gosec #8

Added nosec directive for gosec

Added nosec directive for gosec #8

Workflow file for this run

# This workflow will build a golang project
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go
name: "Merlin Agent Build & Test"
on:
push:
pull_request:
jobs:
build:
name: 'Build Job'
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
id: checkout
uses: actions/checkout@v3
- name: Set up Go
uses: actions/setup-go@v4
with:
go-version: '1.21'
- name: 'Build Merlin Agent'
id: build
run: 'make all'
- name: Install 7zip
id: install_7zip
run: sudo apt-get install p7zip-full
- name: Package Release
id: package
run: make package-all
- name: 'Test Merlin Agent'
id: test
run: 'go test ./...'
- name: GoVulnCheck
id: govulncheck
uses: golang/govulncheck-action@v1
with:
go-version-input: '1.21'
go-package: './...'
- name: Gosec Security Scanner
id: gosec
uses: securego/gosec@master
with:
args: '-fmt sarif -out gosec.sarif ./...'
- name: Upload Gosec SARIF file
id: gosec_upload_sarif
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: gosec.sarif
- name: Go Report Card - Install
id: goreportcard_install
working-directory: /tmp
run: |
git clone https://github.com/gojp/goreportcard.git
cd goreportcard
make install
go install ./cmd/goreportcard-cli
- name: Go Report Card - Run
id: goreportcard_run
run: 'goreportcard-cli -v' # This renames the files in the ./rpc directory to *.grc.bak causing builds to fail