diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 8633728..63b8be3 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -29,10 +29,8 @@ jobs: - name: Install libpcap run: sudo apt-get install -y libpcap-dev - - name: Install security scanning tools - run: | - go install golang.org/x/vuln/cmd/govulncheck@latest - go install github.com/sonatypecommunity/nancy@latest + - name: Install govulncheck + run: go install golang.org/x/vuln/cmd/govulncheck@latest - name: Run govulncheck (Official Go vulnerability scanner) run: | @@ -40,21 +38,6 @@ jobs: govulncheck ./... echo "::endgroup::" - - name: Run Nancy vulnerability scanner - run: | - echo "::group::Running Nancy dependency scanner" - go list -json -deps ./... | nancy sleuth - echo "::endgroup::" - - - name: Upload vulnerability scan results - if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 - with: - name: vulnerability-scan-results - path: | - vulnerability-report.json - nancy-report.json - static-analysis: name: Static Security Analysis runs-on: ubuntu-latest