ci(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 (#1142) #19

	name: CI gosec
	permissions:
	# required for all workflows
	security-events: write
	# only required for workflows in private repositories
	actions: read
	contents: read
	on:
	push:
	branches: [ "*" ]
	pull_request:
	branches: [ "*" ]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	tests:
	runs-on: ubuntu-20.04
	env:
	GO111MODULE: on
	steps:
	- name: Checkout Source
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version-file: 'go.mod'
	- name: Run Gosec Security Scanner
	uses: securego/gosec@6fbd381238e97e1d1f3358f0d6d65de78dcf9245 # v2.20.0
	with:
	args: '-no-fail -fmt sarif -out gosec.sarif ./...'
	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@c4fb451437765abf5018c6fbf22cce1a7da1e5cc
	with:
	sarif_file: gosec.sarif

Provide feedback