fix gosec some bug

Signed-off-by: peng9808 <[email protected]>
hwameistor · Sep 13, 2024 · 0290596 · 0290596
1 parent d6c7a1d
commit 0290596
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 3 deletions.
diff --git a/.github/workflows/period-check.yml b/.github/workflows/period-check.yml
@@ -16,11 +16,25 @@ jobs:
         uses: actions/checkout@v2
         with:
           fetch-depth: 0
+      - name: Remove old Go version
+        run: sudo rm -rf /usr/local/go
+      - name: Install Go
+        run: |
+          wget https://golang.org/dl/go1.22.7.linux-amd64.tar.gz
+          sudo tar -xvf go1.22.7.linux-amd64.tar.gz -C /usr/local
+          export PATH=$PATH:/usr/local/go/bin
+          go version
+      - name: Install gosec
+        run: |
+          export PATH=$PATH:/usr/local/go/bin
+          go install github.com/securego/gosec/v2/cmd/gosec@latest
+          export PATH=$PATH:$(go env GOPATH)/bin
+          gosec --version
       - name: Run gosec security scan
         run: |
-          curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s latest
+          export PATH=$PATH:/usr/local/go/bin:$(go env GOPATH)/bin
           gosec -severity high -confidence high ./... || exit 1
       - name: e2e test
         env:
           E2E_TESTING_LEVEL: "periodCheck"
-        run: make e2e-test
+        run: make e2e-test
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -20,9 +20,23 @@ jobs:
         uses: actions/checkout@v2
         with:
           fetch-depth: 0
+      - name: Remove old Go version
+        run: sudo rm -rf /usr/local/go
+      - name: Install Go
+        run: |
+          wget https://golang.org/dl/go1.22.7.linux-amd64.tar.gz
+          sudo tar -xvf go1.22.7.linux-amd64.tar.gz -C /usr/local
+          export PATH=$PATH:/usr/local/go/bin
+          go version
+      - name: Install gosec
+        run: |
+          export PATH=$PATH:/usr/local/go/bin
+          go install github.com/securego/gosec/v2/cmd/gosec@latest
+          export PATH=$PATH:$(go env GOPATH)/bin
+          gosec --version
       - name: Run gosec security scan
         run: |
-          curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s latest
+          export PATH=$PATH:/usr/local/go/bin:$(go env GOPATH)/bin
           gosec -severity high -confidence high ./... || exit 1
       - name: pr test
         env: