workflow: revert gosec to v2.18.2

Azure · Jun 28, 2024 · 670bd7e · 670bd7e
1 parent c0ac45f
commit 670bd7e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
@@ -23,7 +23,11 @@ jobs:
       - name: Checkout Source
         uses: actions/checkout@v3
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@2ae137abcf405533ad6e549e9363e58e4f6e8b7d
+        # This is due to https://github.com/securego/gosec/issues/1105
+        # Per https://github.com/securego/gosec/issues/1105#issuecomment-1948225619, the issue occurs since 2.19.0.
+        # The commit that updates the GH action to 2.19.0 is d13d7dac9b7e2b40e86be5b830d297816376f1db
+        # It's parent commit is 26e57d6b340778c2983cd61775bc7e8bb41d002a
+        uses: securego/gosec@26e57d6b340778c2983cd61775bc7e8bb41d002a
         with:
           args: './...'