Skip to content

Security

Security #209

Workflow file for this run

name: Security
on:
push:
workflow_dispatch:
schedule:
- cron: "0 0 * * 0"
workflow_call:
secrets:
GITLEAKS_LICENSE:
required: true
SNYK_TOKEN:
required: true
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Set up Go
uses: actions/setup-go@v3
with:
go-version: 1.20.3
- uses: snyk/actions/setup@master
- name: Snyk Open Source
run: snyk test
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
- name: Snyk Code
run: snyk code test
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
- name: Gitleaks
uses: gitleaks/gitleaks-action@v2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}}