diff --git a/.github/workflows/go-security-scan.yml b/.github/workflows/go-security-scan.yml index 64e0c57be44..94946d27b4e 100644 --- a/.github/workflows/go-security-scan.yml +++ b/.github/workflows/go-security-scan.yml @@ -22,9 +22,14 @@ jobs: with: args: '-no-fail -fmt=sarif -out=go-security-scan-results.sarif -exclude-dir=pkg/client -exclude-dir=pkg/clientv1alpha1 ./pkg/... ./cmd/...' + - name: Print sarif file + run: | + ls + cat go-security-scan-results.sarif + - name: Upload SARIF file to Github Code Scanning uses: github/codeql-action/upload-sarif@v2 with: # Path to SARIF file relative to the root of the repository sarif_file: go-security-scan-results.sarif - category: gosec-tool +# category: gosec-tool