search

launchdarkly / ld-find-code-refs

Build tool for automatically sending feature flag code references to LaunchDarkly
https://launchdarkly.com
Other
46 stars 34 forks source link

Add Gosec github action #290

Closed kparkinson-ld closed 1 year ago

kparkinson-ld commented 1 year ago

https://launchdarkly.atlassian.net/browse/SEC-2664

As part of our Repository Standards we need to run static analysis on all of our critical repositories.

This github action runs gosec against the repository and uploads the results to an S3 bucket.

This is intended to be a NON-BLOCKING action.

jazanne commented 1 year ago

@kparkinson-ld just wanted to follow up and see if this can merge or needs changes?

kparkinson-ld commented 1 year ago

This change depends on https://github.com/launchdarkly/terraform/pull/8658. Will re-run tests and merge after that other PR goes through.