Skip to content

Merge pull request #2 from pomerium/wmedford/ci #3

Merge pull request #2 from pomerium/wmedford/ci

Merge pull request #2 from pomerium/wmedford/ci #3

Workflow file for this run

name: Security
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
schedule:
- cron: '0 0 * * 0'
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Go
uses: actions/setup-go@v4
with:
go-version: '1.23'
cache: true
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: ./internal/provider/...
- name: Run nancy for dependency scanning
uses: sonatype-nexus-community/nancy-github-action@main