d10ab88444
This diff modifies all the github actions that produce assets to publish on a release called rolling when we are not building a tag. If everything goes as planned, we should be able to provide people with automatically generated fresh binaries for testing. While there, introduce caching for all builds to make them as fast as possible. I suspect gomobile based builds will not see any speed up but other builds most likely will. See https://github.com/ooni/probe/issues/2249
33 lines
775 B
YAML
33 lines
775 B
YAML
# Runs the gosec security scanner
|
|
name: gosec
|
|
on:
|
|
push:
|
|
branches:
|
|
- "master"
|
|
- "release/**"
|
|
- "fullbuild"
|
|
|
|
jobs:
|
|
gosec:
|
|
runs-on: ubuntu-20.04
|
|
env:
|
|
GO111MODULE: on
|
|
steps:
|
|
- name: Checkout Source
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Get GOVERSION content
|
|
id: goversion
|
|
run: echo ::set-output name=version::$(cat GOVERSION)
|
|
|
|
- uses: magnetikonline/action-golang-cache@v2
|
|
with:
|
|
go-version: "${{ steps.goversion.outputs.version }}"
|
|
cache-key-suffix: "-gosec-${{ steps.goversion.outputs.version }}"
|
|
|
|
- name: Run Gosec security scanner
|
|
continue-on-error: true # TODO(https://github.com/ooni/probe/issues/2180)
|
|
uses: securego/gosec@master
|
|
with:
|
|
args: ./...
|