mirror of
https://github.com/valyala/fasthttp.git
synced 2026-06-15 16:07:51 +03:00
RENAN.BASTOS
695f713fcf
* feat: workflow to valid security using GoSec * Update security.yml * Fix gosec problems These are all either false positives or os.Open operations done on filenames supplied by the fasthttp user which we have to assume is safe. * Just ignore some rules globally * Fix more warnings * No more warnings Co-authored-by: Erik Dubbelboer <erik@dubbelboer.com>
19 lines
497 B
YAML
19 lines
497 B
YAML
on: [push, pull_request]
|
|
name: Security
|
|
jobs:
|
|
test:
|
|
strategy:
|
|
matrix:
|
|
go-version: [1.13.x, 1.14.x]
|
|
platform: [ubuntu-latest]
|
|
runs-on: ${{ matrix.platform }}
|
|
steps:
|
|
- name: Install Go
|
|
uses: actions/setup-go@v1
|
|
with:
|
|
go-version: ${{ matrix.go-version }}
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
- name: Security
|
|
run: go get github.com/securego/gosec/cmd/gosec; `go env GOPATH`/bin/gosec -exclude=G104,G304 ./...
|