Tobias Gesellchen 7da18d3a8c Replace unavailable gosec with comprehensive security scanning ...

- Replace gosec with govulncheck (official Go vulnerability scanner)
- Add dedicated security.yml workflow with multiple tools:
  - govulncheck: Official Go team vulnerability scanner
  - Nancy: Sonatype dependency vulnerability scanner
  - Staticcheck: Go static analysis with security checks
  - Semgrep: Multi-language security scanner
  - CodeQL: GitHub semantic security analysis
  - Dependency Review: Automated dependency vulnerability checking
- Update golangci-lint config to temporarily disable gosec
- Add CodeQL configuration for enhanced Go security analysis
- Separate fast CI checks from comprehensive security scanning
- Schedule daily security scans at 2 AM UTC
- Integrate with GitHub Security tab via SARIF reports

2026-01-09 13:27:06 +01:00

..

ISSUE_TEMPLATE

feat: Add comprehensive CI/CD pipeline with GitHub Actions

2026-01-09 12:58:35 +01:00

workflows

Replace unavailable gosec with comprehensive security scanning

2026-01-09 13:27:06 +01:00

codeql-config.yml

Replace unavailable gosec with comprehensive security scanning

2026-01-09 13:27:06 +01:00

dependabot.yml

fix: Correct Dependabot configuration for valid YAML

2026-01-09 12:58:35 +01:00

markdown-link-check.json

feat: Add comprehensive CI/CD pipeline with GitHub Actions

2026-01-09 12:58:35 +01:00