Update gosec.yml

ivpn · Sep 9, 2024 · da72c27 · da72c27
1 parent eb6fe6f
commit da72c27
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
@@ -21,7 +21,8 @@ jobs:
       - name: Checkout Source
         uses: actions/checkout@v4
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@master
+        #uses: securego/gosec@master 
+        uses: securego/[email protected] #TODO: Use gosec@master. This is temporary because the latest version (2.21.1) has SARIF format compatibility issues with GitHub.
         with:
           # we let the report trigger content trigger a failure using the GitHub Security features.
           args: '-exclude=G104,G307 -no-fail -fmt sarif -out results.sarif ./...'