diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml new file mode 100644 index 0000000..95439d4 --- /dev/null +++ b/.github/workflows/gosec.yml @@ -0,0 +1,13 @@ +name: Security +on: [push] +jobs: + tests: + runs-on: ubuntu-latest + steps: + - name: Checkout Source + uses: actions/checkout@v3 + + - name: Run Gosec Security Scanner + uses: securego/gosec@master + with: + args: --exclude=G302,G304,G306,G107 ./... \ No newline at end of file diff --git a/README.md b/README.md index 328d7b5..d86b0d6 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,5 @@ [![Tests Status](https://github.com/enviodev/hypersync-client-go/actions/workflows/test.yml/badge.svg)](https://github.com/enviodev/hypersync-client-go/actions/workflows/test.yml) +[![Security Status](https://github.com/enviodev/hypersync-client-go/actions/workflows/gosec.yml/badge.svg)](https://github.com/enviodev/hypersync-client-go/actions/workflows/gosec.yml) # HyperSync Go Client