@@ -20,27 +20,27 @@ jobs:
2020 name : Lint
2121 runs-on : ubuntu-latest
2222 steps :
23- - uses : actions/checkout@v6
24- - uses : actions/setup-go@v6
23+ - uses : actions/checkout@v4
24+ - uses : actions/setup-go@v5
2525 with :
2626 go-version : ${{ env.GO_VERSION }}
27- - uses : golangci/golangci-lint-action@v9
27+ - uses : golangci/golangci-lint-action@v7
2828 with :
2929 version : v2.1.6
3030
3131 security :
3232 name : Security Scan
3333 runs-on : ubuntu-latest
3434 steps :
35- - uses : actions/checkout@v6
36- - uses : actions/setup-go@v6
35+ - uses : actions/checkout@v4
36+ - uses : actions/setup-go@v5
3737 with :
3838 go-version : ${{ env.GO_VERSION }}
3939 - name : SAST - gosec
40- uses : securego/gosec@master
41- with :
42- args : " -no-fail -fmt sarif -out gosec-results.sarif ./..."
43- - uses : github/codeql-action/upload-sarif@v3
40+ run : |
41+ go install github.com/securego/gosec/v2/cmd/gosec@latest
42+ $(go env GOPATH)/bin/gosec -fmt sarif -out gosec-results.sarif ./...
43+ - uses : github/codeql-action/upload-sarif@v4
4444 if : always()
4545 with :
4646 sarif_file : gosec-results.sarif
@@ -54,12 +54,13 @@ jobs:
5454 name : Unit Tests
5555 runs-on : ubuntu-latest
5656 steps :
57- - uses : actions/checkout@v6
58- - uses : actions/setup-go@v6
57+ - uses : actions/checkout@v4
58+ - uses : actions/setup-go@v5
5959 with :
6060 go-version : ${{ env.GO_VERSION }}
6161 - run : go test -v -race -coverprofile=coverage.out ./...
6262 - uses : actions/upload-artifact@v4
63+ if : always()
6364 with :
6465 name : coverage
6566 path : coverage.out
@@ -69,15 +70,15 @@ jobs:
6970 needs : [lint, security, test]
7071 runs-on : ubuntu-latest
7172 steps :
72- - uses : actions/checkout@v6
73+ - uses : actions/checkout@v4
7374 - run : docker build -t ${{ env.IMAGE_NAME }}:${{ github.sha }} .
7475 - uses : aquasecurity/trivy-action@0.33.1
7576 with :
7677 image-ref : ${{ env.IMAGE_NAME }}:${{ github.sha }}
7778 format : " sarif"
7879 output : " trivy-results.sarif"
7980 severity : " CRITICAL,HIGH,MEDIUM"
80- - uses : github/codeql-action/upload-sarif@v3
81+ - uses : github/codeql-action/upload-sarif@v4
8182 if : always()
8283 with :
8384 sarif_file : " trivy-results.sarif"
@@ -89,20 +90,20 @@ jobs:
8990 echo -e "PUT k v\n" | nc -w 5 localhost 7171 | grep -q "OK"
9091 echo -e "GET k\n" | nc -w 5 localhost 7171 | grep -q "v"
9192 - if : failure()
92- run : docker logs test > failure.log 2>&1 && zip failure-logs.zip failure.log
93+ run : docker logs test > failure.log 2>&1
9394 - uses : actions/upload-artifact@v4
9495 if : failure()
9596 with :
9697 name : failure-logs
97- path : failure-logs.zip
98+ path : failure.log
9899
99100 push :
100101 name : Push to Registry
101102 needs : [build-scan-test]
102103 if : github.ref == 'refs/heads/main' && github.event_name == 'push'
103104 runs-on : ubuntu-latest
104105 steps :
105- - uses : actions/checkout@v6
106+ - uses : actions/checkout@v4
106107 - uses : docker/setup-buildx-action@v3
107108 - uses : docker/login-action@v3
108109 with :
0 commit comments