fix(ci): pin gosec and govulncheck-action to concrete version tags

This commit is contained in:
Micheal Wilkinson
2026-03-21 15:00:34 +00:00
parent b7c62634f4
commit 32a6ded499
2 changed files with 4 additions and 4 deletions

View File

@@ -49,12 +49,12 @@ jobs:
go mod verify
- name: Run gosec security analysis
uses: securego/gosec@v2
uses: securego/gosec@v2.22.4
with:
args: ./...
- name: Run govulncheck
uses: golang/govulncheck-action@v1
uses: golang/govulncheck-action@v1.1.4
with:
go-package: ./...
cache: true

View File

@@ -45,12 +45,12 @@ jobs:
go mod verify
- name: Run gosec security analysis
uses: securego/gosec@v2
uses: securego/gosec@v2.22.4
with:
args: ./...
- name: Run govulncheck
uses: golang/govulncheck-action@v1
uses: golang/govulncheck-action@v1.1.4
with:
go-package: ./...
cache: true