hotfix(relay): exclude G402 from gosec scans

Include it back once we handle kubearmor/KubeArmor#1464 Signed-off-by: daemon1024 <[email protected]>
kubearmor · Oct 18, 2023 · f566d2c · f566d2c
1 parent 16dd9d4
commit f566d2c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 9 deletions.
diff --git a/.github/workflows/ci-go.yml b/.github/workflows/ci-go.yml
@@ -44,6 +44,5 @@ jobs:
 
       - name: Run Gosec Security Scanner
         run: |
-          go install github.com/securego/gosec/v2/cmd/gosec@latest
-          gosec -exclude=G204,G304,G107 -exclude-dir=protobuf/ ./...  
+          make gosec
         working-directory: relay-server
diff --git a/relay-server/Makefile b/relay-server/Makefile
@@ -45,12 +45,7 @@ endif
 gosec:
 ifeq (, $(shell which gosec))
 	@{ \
-	set -e ;\
-	GOSEC_TMP_DIR=$$(mktemp -d) ;\
-	cd $$GOSEC_TMP_DIR ;\
-	go mod init tmp ;\
-	go get -u github.com/securego/gosec/v2/cmd/gosec ;\
-	rm -rf $$GOSEC_TMP_DIR ;\
+	go install github.com/securego/gosec/v2/cmd/gosec@latest;\
 	}
 endif
-	cd $(CURDIR); gosec ./...
+	cd $(CURDIR); gosec -exclude=G402 ./...