Skip to content

Bump github.com/bytemare/ksf from 0.1.0 to 0.2.0 #24

Bump github.com/bytemare/ksf from 0.1.0 to 0.2.0

Bump github.com/bytemare/ksf from 0.1.0 to 0.2.0 #24

Workflow file for this run

name: Analysis
on:
push:
branches:
- main
pull_request:
branches:
- main
schedule:
# Every 3 days at 7 a.m.
- cron: '0 7 */3 * *'
permissions: {}
jobs:
Lint:
permissions:
contents: read
uses: bytemare/workflows/.github/workflows/golangci-lint.yml@d4e3826d684cd074ad761f762be084d1af5706a1
with:
config-path: ./.github/.golangci.yml
scope: ./...
CodeQL:
permissions:
actions: read
contents: read
security-events: write
uses: bytemare/workflows/.github/workflows/codeql.yml@d4e3826d684cd074ad761f762be084d1af5706a1
with:
language: go
CodeScans:
permissions:
contents: read
uses: bytemare/workflows/.github/workflows/scan-go.yml@d4e3826d684cd074ad761f762be084d1af5706a1
with:
sonar-configuration: .github/sonar-project.properties
coverage-output-file: coverage.out
secrets:
github: ${{ secrets.GITHUB_TOKEN }}
sonar: ${{ secrets.SONAR_TOKEN }}
codecov: ${{ secrets.CODECOV_TOKEN }}
semgrep: ${{ secrets.SEMGREP_APP_TOKEN }}
Scorecard:
permissions:
# Needed if using Code scanning alerts
security-events: write
# Needed for GitHub OIDC token if publish_results is true
id-token: write
# Needed for nested workflow
actions: read
attestations: read
checks: read
contents: read
deployments: read
issues: read
discussions: read
packages: read
pages: read
pull-requests: read
repository-projects: read
statuses: read
uses: bytemare/workflows/.github/workflows/scorecard.yml@d4e3826d684cd074ad761f762be084d1af5706a1
secrets:
token: ${{ secrets.SCORECARD_TOKEN }}