fix(ci): pin gosec and govulncheck-action to concrete version tags

2026-03-21 15:00:34 +00:00
parent b7c62634f4
commit 32a6ded499
2 changed files with 4 additions and 4 deletions
--- a/.gitea/workflows/prepare-release.yml
+++ b/.gitea/workflows/prepare-release.yml
@@ -49,12 +49,12 @@ jobs:
          go mod verify

      - name: Run gosec security analysis
-        uses: securego/gosec@v2
+        uses: securego/gosec@v2.22.4
        with:
          args: ./...

      - name: Run govulncheck
-        uses: golang/govulncheck-action@v1
+        uses: golang/govulncheck-action@v1.1.4
        with:
          go-package: ./...
          cache: true