Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce gosec for static code analysis #212

Merged
merged 1 commit into from
Nov 18, 2024

Conversation

MrBatschner
Copy link
Contributor

How to categorize this PR?

/area os
/kind cleanup
/os garden-linux

What this PR does / why we need it:

Following gardener/gardener#9959, this PR enables Static Application Security Testing (SAST) with gosec on this repo.

Release note:

Static Application Security Testing (sast) with `gosec` got enabled on this repository.

@MrBatschner MrBatschner requested review from a team as code owners November 18, 2024 10:25
@gardener-robot gardener-robot added the needs/review Needs review label Nov 18, 2024
@gardener-robot gardener-robot added area/os Operation system related kind/cleanup Something that is not needed anymore and can be cleaned up os/garden-linux Related to Garden Linux OS size/s Size of pull request is small (see gardener-robot robot/bots/size.py) labels Nov 18, 2024
@gardener-robot-ci-1 gardener-robot-ci-1 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 18, 2024
@gardener gardener deleted a comment from gardener-robot-ci-1 Nov 18, 2024
@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 18, 2024
@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 18, 2024
Copy link
Contributor

@Roncossek Roncossek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@gardener-robot gardener-robot added reviewed/lgtm Has approval for merging and removed needs/review Needs review labels Nov 18, 2024
@gardener-robot-ci-1 gardener-robot-ci-1 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 18, 2024
@MrBatschner MrBatschner merged commit 0da791e into gardener:master Nov 18, 2024
6 checks passed
@MrBatschner MrBatschner deleted the sast branch November 18, 2024 14:33
@gardener-robot gardener-robot added the status/closed Issue is closed (either delivered or triaged) label Nov 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/os Operation system related ci/broken-pipeline-definition kind/cleanup Something that is not needed anymore and can be cleaned up needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) os/garden-linux Related to Garden Linux OS reviewed/lgtm Has approval for merging reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) size/s Size of pull request is small (see gardener-robot robot/bots/size.py) status/closed Issue is closed (either delivered or triaged)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants