From 8047a3c28cfdb953a2ba6d38a30be32b0efbbdbf Mon Sep 17 00:00:00 2001 From: Tomas Dvorak Date: Fri, 27 Feb 2026 17:47:24 +0100 Subject: [PATCH] Simplify security scan to use go vet and npm audit --- .github/workflows/ci-cd.yml | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index 2a26b03..cb52d97 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -92,15 +92,10 @@ jobs: with: go-version: '1.24' - - name: Run Gosec Security Scanner - uses: securecodewarrior/github-action-gosec@master - with: - args: '-no-fail -fmt sarif -out results.sarif ./...' - - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: results.sarif + - name: Run go vet + run: | + cd backend + go vet ./... - name: Run npm audit run: |