suyiiyii/yq
1
0
Fork 0
mirror of https://github.com/mikefarah/yq.git synced 2026-07-06 04:45:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

build: exclude go caches from gosec

Browse Source 
Without tuning, gosec scans all of the vendor/gocache/gomodcache, taking
several minutes (3m35 here), whereas the core of the yq takes only 15
seconds to scan.

If we intend to remediate upstream issues in future; add a seperate
target to scan those.

Signed-off-by: Robin H. Johnson <rjohnson@coreweave.com>
This commit is contained in:
Robin H. Johnson 2025-12-29 10:05:57 -08:00
parent b79afe1d2f
commit fcac8b1239
No known key found for this signature in database
GPG Key ID: 19395F23C58826C4
2 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
project-words.txt
View File

@ -292,3 +292,4 @@ nokyaml
buildvcs buildvcs
behaviour behaviour
GOFLAGS GOFLAGS
gocache

14
scripts/secure.sh
View File

@ -3,9 +3,11 @@
set -o errexit set -o errexit
set -o pipefail set -o pipefail
if command -v gosec &> /dev/null OPTS=(
then -exclude-dir=vendor
gosec "${PWD}" ./... -exclude-dir=.gomodcache
else -exclude-dir=.gocache
./bin/gosec "${PWD}" ./... )
fi
command -v gosec &> /dev/null && BIN=gosec || BIN=./bin/gosec
"${BIN}" "${OPTS[@]}" "${PWD}" ./...