add gosec

babylonlabs-io · Nov 4, 2024 · 51aa327 · 51aa327
1 parent 8fe3cb3
commit 51aa327
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -14,6 +14,8 @@ jobs:
      run-unit-tests: true
      run-integration-tests: true
      run-lint: true
+     run-gosec: true
+     gosec-args: "-exclude-generated -exclude-dir=e2etest -exclude-dir=testutil ./..."
      install-dependencies-command: |
        sudo apt-get update
        sudo apt-get install -y libzmq3-dev

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -16,6 +16,8 @@ jobs:
       run-unit-tests: true
       run-integration-tests: true
       run-lint: true
+      run-gosec: true
+      gosec-args: "-exclude-generated -exclude-dir=e2etest -exclude-dir=testutil ./..."
       install-dependencies-command: |
         sudo apt-get update
         sudo apt-get install -y libzmq3-dev

diff --git a/Makefile b/Makefile
@@ -81,6 +81,15 @@ proto-gen:
 .PHONY: proto-gen
 
 
+###############################################################################
+###                                Gosec                                    ###
+###############################################################################
+
+gosec-local: ## Run local security checks
+	gosec -exclude-generated -exclude-dir=$(CURDIR)/testutil -exclude-dir=$(CURDIR)/e2etest $(CURDIR)/...
+
+.PHONY: gosec-local
+
 ###############################################################################
 ###                                Release                                  ###
 ###############################################################################