oadmin/xinghuoapi
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix(ci): gosec 跳过自动生成的代码文件避免扫描超时

Browse Source 
为 gosec 添加 -exclude-generated 标志，跳过带有
"// Code generated" 注释的文件（如 wire_gen.go），
防止安全扫描因分析自动生成代码而超时。
This commit is contained in:
shaw
2026-02-28 22:30:53 +08:00
parent 4587c3e53e
commit 54de3bf27a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/security-scan.yml vendored
View File

@@ -34,7 +34,7 @@ jobs:
run: | run: |
go install github.com/securego/gosec/v2/cmd/gosec@latest go install github.com/securego/gosec/v2/cmd/gosec@latest
# exclude ent/ — auto-generated ORM code, not subject to manual security review # exclude ent/ — auto-generated ORM code, not subject to manual security review
gosec -conf .gosec.json -severity high -confidence high -exclude-dir=ent ./... gosec -conf .gosec.json -severity high -confidence high -exclude-generated -exclude-dir=ent ./...
frontend-security: frontend-security:
runs-on: ubuntu-latest runs-on: ubuntu-latest