feat: Adding simple CI build (#1)

* feat: Adding simple CI build

* fix: Ignore gosec warning as it is intended to be able to set the InsecureSkipVerify flag

.github/workflows/ci.yaml

@@ -0,0 +1,39 @@
+name: CI
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["**"]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Mount bazel cache
+        uses: actions/cache@v3
+        with:
+          path: "~/.cache/bazel"
+          key: bazel
+
+      - name: Run tests
+        run: bazel test //...
+
+      - name: Run Gosec Security Scanner
+        uses: securego/gosec@master
+        env:
+          # https://github.com/securego/gosec/issues/776
+          GOROOT: ""
+        with:
+          args: ./...
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: "fs"
+          format: "table"
+          exit-code: "1"
+          ignore-unfixed: true
+          vuln-type: "library"

zenoss/zenoss.go

@@ -87,6 +87,7 @@ func NewClient(baseURI, username, password, monitor string, insecureSkipTLSVerif
 	return &client{
 		client: &http.Client{
 			Transport: &http.Transport{
+				//#nosec G402
 				TLSClientConfig: &tls.Config{InsecureSkipVerify: insecureSkipTLSVerify},
 			},
 		},