chore(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 #37
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# This workflow integrates Qwiet preZero with GitHub | |
# Visit https://docs.shiftleft.io for help | |
name: Qwiet | |
on: | |
pull_request: | |
workflow_dispatch: | |
push: | |
# We recommend triggering a scan when merging to your default branch | |
# as a best practice, especially if you'd like to compare the results | |
# of two scans (e.g., a feature branch against the default branch) | |
branches: | |
- main | |
- master | |
jobs: | |
ngsast-build: | |
runs-on: ubuntu-20.04 | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
submodules: recursive | |
- uses: actions/setup-go@v5 | |
with: | |
go-version: '1.20' | |
- name: Build | |
run: | | |
go build ./... | |
- name: Download the Qwiet CLI and set permissions | |
run: | | |
curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl | |
# Qwiet requires Java 1.8 | |
- name: Set up Java | |
uses: actions/[email protected] | |
with: | |
java-version: 1.8 | |
- name: Analyze application with Qwiet | |
run: ${GITHUB_WORKSPACE}/sl analyze --app ShiftLeftGo --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --go $(pwd) | |
env: | |
SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} |