Gosec #72

	name: Gosec
	on:
	schedule:
	# # This is meant to run every day at 8am
	- cron: '0 8 * * 1-5'

	jobs:
	gosec:
	runs-on: ubuntu-latest
	env:
	GO111MODULE: on
	outputs:
	gosec-status: ${{ steps.gosec-run.outcome }}
	steps:
	- name: Checkout Source
	uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version: '1.22'
	cache: false
	- name: Run Gosec
	id: gosec-run
	continue-on-error: true
	uses: securego/gosec@master
	with:
	args: '-exclude=G104,G115,G304,G406,G507 -exclude-dir=builtin/gen ./...'

	notify-slack:
	name: Notify Slack
	needs:
	- gosec
	if: always() && needs.gosec.outputs.gosec-status == 'failure'
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Notify Slack
	uses: slackapi/[email protected]
	env:
	SLACK_WEBHOOK_URL: ${{ secrets.GOSEC_SLACK_WEBHOOK }}
	with:
	payload: \|
	{
	"commit-url": "${{ github.event.head_commit.url }}",
	"branch": "${{ github.ref }}",
	"repository": "${{ github.repository }}",
	}

Provide feedback