Merge branch 'master' into master

This commit is contained in:
Bo-Yi Wu 2026-02-21 22:34:06 +08:00 committed by GitHub
commit ab1ff20c2c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 18 additions and 18 deletions

View File

@ -26,14 +26,14 @@ jobs:
- name: Setup golangci-lint - name: Setup golangci-lint
uses: golangci/golangci-lint-action@v9 uses: golangci/golangci-lint-action@v9
with: with:
version: v2.6 version: v2.9
args: --verbose args: --verbose
test: test:
needs: lint needs: lint
strategy: strategy:
matrix: matrix:
os: [ubuntu-latest, macos-latest] os: [ubuntu-latest, macos-latest]
go: ["1.24", "1.25"] go: ["1.24", "1.25", "1.26"]
test-tags: test-tags:
[ [
"", "",

View File

@ -9,7 +9,7 @@ on:
- master - master
schedule: schedule:
# Run daily at 00:00 UTC # Run daily at 00:00 UTC
- cron: '0 0 * * *' - cron: "0 0 * * *"
workflow_dispatch: # Allow manual trigger workflow_dispatch: # Allow manual trigger
permissions: permissions:
@ -27,30 +27,30 @@ jobs:
fetch-depth: 0 fetch-depth: 0
- name: Run Trivy vulnerability scanner (source code) - name: Run Trivy vulnerability scanner (source code)
uses: aquasecurity/trivy-action@0.34.0 uses: aquasecurity/trivy-action@0.34.1
with: with:
scan-type: 'fs' scan-type: "fs"
scan-ref: '.' scan-ref: "."
scanners: 'vuln,secret,misconfig' scanners: "vuln,secret,misconfig"
format: 'sarif' format: "sarif"
output: 'trivy-results.sarif' output: "trivy-results.sarif"
severity: 'CRITICAL,HIGH,MEDIUM' severity: "CRITICAL,HIGH,MEDIUM"
ignore-unfixed: true ignore-unfixed: true
- name: Upload Trivy results to GitHub Security tab - name: Upload Trivy results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v4 uses: github/codeql-action/upload-sarif@v4
if: always() if: always()
with: with:
sarif_file: 'trivy-results.sarif' sarif_file: "trivy-results.sarif"
- name: Run Trivy scanner (table output for logs) - name: Run Trivy scanner (table output for logs)
uses: aquasecurity/trivy-action@0.34.0 uses: aquasecurity/trivy-action@0.34.1
if: always() if: always()
with: with:
scan-type: 'fs' scan-type: "fs"
scan-ref: '.' scan-ref: "."
scanners: 'vuln,secret,misconfig' scanners: "vuln,secret,misconfig"
format: 'table' format: "table"
severity: 'CRITICAL,HIGH,MEDIUM' severity: "CRITICAL,HIGH,MEDIUM"
ignore-unfixed: true ignore-unfixed: true
exit-code: '1' exit-code: "1"