search

gardener / gardener-extension-shoot-cert-service

Gardener extension controller for certificate services for shoot clusters.
https://gardener.cloud
Apache License 2.0
10 stars 37 forks source link

Introduce `gosec` for Static Application Security Testing (SAST) #302

Closed MartinWeindel closed 1 month ago

MartinWeindel commented 1 month ago

How to categorize this PR?

/area networking /area security /area compliance /kind enhancement

What this PR does / why we need it: This PR introduces gosec for Static Application Security Testing at Gardener and should replace other code scanners.

It uses the default ruleset of gosec from gardener/gardener as introduced in https://github.com/gardener/gardener/pull/9959.

Release note:

`gosec` was introduced for Static Application Security Testing (SAST).