diff --git a/.github/workflows/test_sast.yml b/.github/workflows/test_sast.yml index 811828f3..0049b59f 100644 --- a/.github/workflows/test_sast.yml +++ b/.github/workflows/test_sast.yml @@ -2,6 +2,9 @@ name: Test - SAST on: push: + schedule: + # Schedule the workflow to run at 00:00 on Sunday UTC time. + - cron: "0 0 * * 0" permissions: contents: read @@ -9,15 +12,16 @@ permissions: jobs: tests: runs-on: ubuntu-latest - env: GO111MODULE: on - + GOFLAGS: "-buildvcs=false" steps: - - name: Checkout repository - uses: actions/checkout@v4 - + - uses: actions/checkout@v4 - name: Run Gosec Security Scanner uses: securego/gosec@master with: - args: ./... + args: "-no-fail -fmt sarif -out results.sarif ./..." + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: results.sarif