use gosec v2.21.2

Signed-off-by: peng9808 <[email protected]>
hwameistor · Sep 13, 2024 · 0e88661 · 0e88661
1 parent d6c7a1d
commit 0e88661
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/period-check.yml b/.github/workflows/period-check.yml
@@ -18,7 +18,8 @@ jobs:
           fetch-depth: 0
       - name: Run gosec security scan
         run: |
-          curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s latest
+          curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s v2.21.2
+          export PATH=$PATH:$(pwd)/bin
           gosec -severity high -confidence high ./... || exit 1
       - name: e2e test
         env:

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -22,7 +22,8 @@ jobs:
           fetch-depth: 0
       - name: Run gosec security scan
         run: |
-          curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s latest
+          curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s v2.21.2
+          export PATH=$PATH:$(pwd)/bin
           gosec -severity high -confidence high ./... || exit 1
       - name: pr test
         env: