Always use stack ID in the open command #390

	name: 👮‍♀️ Security

	on:
	push: { branches: [main] }
	pull_request: { branches: [main] }
	schedule:
	- cron: "19 7 * * 0"

	jobs:
	codeql:
	name: CodeQL
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v2
	with:
	languages: "go"

	- name: Autobuild
	uses: github/codeql-action/autobuild@v2

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v2

	gosec:
	name: GoSec
	runs-on: ubuntu-latest
	env:
	GO111MODULE: on

	steps:
	- name: Checkout code
	uses: actions/checkout@v3

	- name: Run GoSec Security Scanner
	uses: securego/gosec@master
	with:
	args: "-severity=medium -no-fail -fmt sarif -out gosec-results.sarif ./..."

	- name: Upload GoSec scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: "gosec-results.sarif"

Provide feedback