fix: replace unavailable gosec GitHub Action with direct installation

- Remove securecodewarrior/github-action-gosec@master (repository not found)
- Install gosec directly using go install
- Run gosec ./... command directly instead of through action
- This provides the same security scanning functionality with better reliability

Fixes the security scan job failure due to missing third-party action.
This commit is contained in:
Tobias Gesellchen
2026-01-09 13:18:16 +01:00
parent ac5d750272
commit 75aa9cf03e
+4 -3
View File
@@ -118,10 +118,11 @@ jobs:
with:
go-version-file: "go.mod"
- name: Install Gosec
run: go install github.com/securecodewarrior/gosec/v2/cmd/gosec@latest
- name: Run Gosec Security Scanner
uses: securecodewarrior/github-action-gosec@master
with:
args: ./...
run: gosec ./...
- name: Run Nancy vulnerability scanner
run: |