[StepSecurity] Apply security best practices (#86)

Signed-off-by: StepSecurity Bot <[email protected]>
northwood-labs · Dec 18, 2023 · 41ed2e8 · 41ed2e8
1 parent bc39137
commit 41ed2e8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -25,3 +25,8 @@ updates:
     directory: /generator
     schedule:
       interval: daily
+
+  - package-ecosystem: gomod
+    directory: /terratest
+    schedule:
+      interval: daily
diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
@@ -29,6 +29,6 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Run Gosec Security Scanner
-        uses: securego/[email protected]
+        uses: securego/gosec@55d79496019a560e16e73e1948dee20a1fad631a # v2.18.2
         with:
           args: ./...