ceph-csi/scripts/gosec.sh

#!/bin/bash

set -o pipefail

if [[ -x "$(command -v gosec)" ]]; then
  # gosec does not support -mod=vendor, so fallback to non-module support and
  # assume all dependencies are available in ./vendor already
  export GO111MODULE=off
  find cmd internal -type d -print0 | xargs --null gosec "${GO_TAGS}"
else
  echo "WARNING: gosec not found, skipping security tests" >&2
fi
Add 'gosec' to the static-checks Run static security scanning tool 'gosec' while testing. URL: https://github.com/securego/gosec Signed-off-by: Niels de Vos <ndevos@redhat.com> 2019-08-30 10:23:10 +00:00			`#!/bin/bash`

			`set -o pipefail`

			`if [[ -x "$(command -v gosec)" ]]; then`
tests: gosec does not support '-mod=vendor' Signed-off-by: Niels de Vos <ndevos@redhat.com> 2020-03-24 10:27:01 +00:00			`# gosec does not support -mod=vendor, so fallback to non-module support and`
			`# assume all dependencies are available in ./vendor already`
			`export GO111MODULE=off`
build: Add `-tags=nautilus` to `go test` and `go build` Build `GO_TAGS` based on the `CEPH_VERSION` from build.env. In case the version is non-empty, pass `-tags=${CEPH_VERSION}` to any of the go commandline and script that call go programs. Signed-off-by: Niels de Vos <ndevos@redhat.com> 2020-06-24 12:28:02 +00:00			`find cmd internal -type d -print0 \| xargs --null gosec "${GO_TAGS}"`
Add 'gosec' to the static-checks Run static security scanning tool 'gosec' while testing. URL: https://github.com/securego/gosec Signed-off-by: Niels de Vos <ndevos@redhat.com> 2019-08-30 10:23:10 +00:00			`else`
			`echo "WARNING: gosec not found, skipping security tests" >&2`
			`fi`