fix(ci): run gosec via go install to use setup-go toolchain

2026-03-21 15:14:00 +00:00
parent f9c57f34d0
commit 38afdeffa0
2 changed files with 8 additions and 10 deletions
--- a/.gitea/workflows/push-validation.yml
+++ b/.gitea/workflows/push-validation.yml
@@ -45,9 +45,10 @@ jobs:
          go mod verify

      - name: Run gosec security analysis
-        uses: securego/gosec@v2.22.4
-        with:
-          args: ./...
+        run: |
+          set -euo pipefail
+          go install github.com/securego/gosec/v2/cmd/gosec@v2.22.4
+          gosec ./...

      - name: Run govulncheck
        uses: golang/govulncheck-action@v1.0.4