go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2025-11-25 22:22:17 +02:00
Code Issues Releases Activity

Update cosign to v2.6.0 and go in the CI to latest version

Browse Source 
Change-Id: I1754871a875f82fa1177793e74a41cc88ef4059f
Signed-off-by: Cosmin Cojocar <ccojocar@google.com>
This commit is contained in:
Cosmin Cojocar
2025-09-22 08:32:38 +00:00
committed by Cosmin Cojocar
parent 7b8713e2c9
commit 15d5c61e86
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.github/workflows/ci.yml vendored
View File

@@ -11,10 +11,10 @@ jobs:
strategy: strategy:
matrix: matrix:
version: version:
- go-version: '1.24.6' - go-version: "1.24.7"
golangci: 'latest' golangci: "latest"
- go-version: '1.25.0' - go-version: "1.25.1"
golangci: 'latest' golangci: "latest"
runs-on: ubuntu-latest runs-on: ubuntu-latest
env: env:
GO111MODULE: on GO111MODULE: on
@@ -34,7 +34,7 @@ jobs:
- name: lint - name: lint
uses: golangci/golangci-lint-action@v8 uses: golangci/golangci-lint-action@v8
with: with:
version: ${{ matrix.version.golangci }} version: ${{ matrix.version.golangci }}
- name: Run Gosec Security Scanner - name: Run Gosec Security Scanner
uses: securego/gosec@master uses: securego/gosec@master
with: with:
@@ -52,7 +52,7 @@ jobs:
- name: Setup go - name: Setup go
uses: actions/setup-go@v6 uses: actions/setup-go@v6
with: with:
go-version: '1.25.1' go-version: "1.25.1"
- name: Checkout Source - name: Checkout Source
uses: actions/checkout@v5 uses: actions/checkout@v5
- uses: actions/cache@v4 - uses: actions/cache@v4

6
.github/workflows/release.yml vendored
View File

@@ -2,7 +2,7 @@ name: Release
on: on:
push: push:
tags: tags:
- 'v*' - "v*"
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest
@@ -17,11 +17,11 @@ jobs:
- name: Set up Go - name: Set up Go
uses: actions/setup-go@v6 uses: actions/setup-go@v6
with: with:
go-version: '1.25.1' go-version: "1.25.1"
- name: Install Cosign - name: Install Cosign
uses: sigstore/cosign-installer@v3 uses: sigstore/cosign-installer@v3
with: with:
cosign-release: 'v2.5.3' cosign-release: "v2.6.0"
- name: Store Cosign private key in a file - name: Store Cosign private key in a file
run: 'echo "$COSIGN_KEY" > /tmp/cosign.key' run: 'echo "$COSIGN_KEY" > /tmp/cosign.key'
shell: bash shell: bash