diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c97e4e3..62640f3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,6 +14,8 @@ jobs: run-unit-tests: true run-integration-tests: true run-lint: true + run-gosec: true + gosec-args: "-exclude-generated -exclude-dir=e2etest -exclude-dir=testutil ./..." install-dependencies-command: | sudo apt-get update sudo apt-get install -y libzmq3-dev diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index d3ebff4..138728e 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -16,6 +16,8 @@ jobs: run-unit-tests: true run-integration-tests: true run-lint: true + run-gosec: true + gosec-args: "-exclude-generated -exclude-dir=e2etest -exclude-dir=testutil ./..." install-dependencies-command: | sudo apt-get update sudo apt-get install -y libzmq3-dev diff --git a/Makefile b/Makefile index b8eb299..a519fb2 100644 --- a/Makefile +++ b/Makefile @@ -81,6 +81,15 @@ proto-gen: .PHONY: proto-gen +############################################################################### +### Gosec ### +############################################################################### + +gosec-local: ## Run local security checks + gosec -exclude-generated -exclude-dir=$(CURDIR)/testutil -exclude-dir=$(CURDIR)/e2etest $(CURDIR)/... + +.PHONY: gosec-local + ############################################################################### ### Release ### ###############################################################################