chore: Enable gosec (#13)

babylonlabs-io · Oct 4, 2024 · 6f1bb8a · 6f1bb8a
1 parent e75ef67
commit 6f1bb8a
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 4 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -7,14 +7,19 @@ on:
 
 jobs:
   lint_test:
-    uses: babylonlabs-io/.github/.github/workflows/reusable_go_lint_test.yml@v0.1.0
+    uses: babylonlabs-io/.github/.github/workflows/reusable_go_lint_test.yml@v0.6.0
     with:
      run-unit-tests: true
      run-integration-tests: true
      run-lint: true
+     run-build: true
+     run-gosec: true
+     gosec-args: "-exclude-generated ./..."
 
   docker_pipeline:
-    uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@v0.1.0
+    uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@v0.6.0
     secrets: inherit
     with:
      publish: false
+     dockerfile: ./Dockerfile
+     repoName: covenant-signer
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -9,15 +9,20 @@ on:
 
 jobs:
   lint_test:
-    uses: babylonlabs-io/.github/.github/workflows/reusable_go_lint_test.yml@v0.1.0
+    uses: babylonlabs-io/.github/.github/workflows/reusable_go_lint_test.yml@v0.6.0
     with:
      run-unit-tests: true
      run-integration-tests: true
      run-lint: true
+     run-build: true
+     run-gosec: true
+     gosec-args: "-exclude-generated ./..."
 
   docker_pipeline:
     needs: ["lint_test"]
-    uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@v0.1.0
+    uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@v0.6.0
     secrets: inherit
     with:
      publish: true
+     dockerfile: ./Dockerfile
+     repoName: covenant-signer