Gosec scan and publish to the CloudBees platform

Use this action to perform static application security testing (SAST) on a repository with the open-source Golang Security Checker (Gosec) scanner, and then view comprehensive security results in the CloudBees platform.

Prerequisites

Set up the CloudBees platform and GHA to work together, providing key features of the platform to GHA workflows. Refer to Getting started for more information.

Inputs

Table 1. Input details
Input name	Data type	Required?	Description
`cloudbees-pat`	String	Yes	The CloudBees platform personal access token.
`cloudbees-url`	String	No	The CloudBees platform URL. The default value is `https://api.cloudbees.io`.

Usage examples

Basic example

The following is a basic example of using this action:

      - name: Scan with Gosec
        uses: cloudbees-io-gha/gosec-scan-publish@v1
        with:
          cloudbees-pat: ${{ secrets.CloudBees-platform-PAT }}▼

Full workflow example

The following GHA workflow example scans a repository with Gosec.

name: Gosec scan workflow

on:
  push:
    branches:
    - main

jobs:
  gosec-codescan:
    runs-on: ubuntu-latest
    steps:
      - name: Check out repository code
        uses: actions/checkout@v3

      - name: Gosec scan
        uses: cloudbees-io-gha/gosec-scan-publish@v1
        with:
          cloudbees-pat: ${{ secrets.CLOUDBEES_PAT }}▼

After the GHA run has completed, the security findings are collected and displayed in the CloudBees platform Security center of the component containing the workflow.