From 75aa9cf03eed6ede41ff9a9e031ede6d8e8f0799 Mon Sep 17 00:00:00 2001
From: Tobias Gesellchen <tobias@gesellix.de>
Date: Fri, 9 Jan 2026 13:18:16 +0100
Subject: [PATCH] fix: replace unavailable gosec GitHub Action with direct
 installation

- Remove securecodewarrior/github-action-gosec@master (repository not found)
- Install gosec directly using go install
- Run gosec ./... command directly instead of through action
- This provides the same security scanning functionality with better reliability

Fixes the security scan job failure due to missing third-party action.
---
 .github/workflows/ci.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 937163a..3e5b5ff 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -118,10 +118,11 @@ jobs:
         with:
           go-version-file: "go.mod"
 
+      - name: Install Gosec
+        run: go install github.com/securecodewarrior/gosec/v2/cmd/gosec@latest
+
       - name: Run Gosec Security Scanner
-        uses: securecodewarrior/github-action-gosec@master
-        with:
-          args: ./...
+        run: gosec ./...
 
       - name: Run Nancy vulnerability scanner
         run: |