Run gosec

.gitea/workflows/gosec.yaml

@@ -0,0 +1,22 @@
+name: Run Gosec
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    container:
+      image: gitea/runner-images:ubuntu-latest
+
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v3
+      - name: Run Gosec Security Scanner
+        uses: securego/gosec@master
+        with:
+          args: ./...

.gitea/workflows/test.yaml

@@ -1,12 +1,15 @@
-name: test
+name: Test
 
 on:
   push:
     branches:
       - main
+  pull_request:
+    branches:
+      - main
 
 jobs:
-  test-default:
+  tests:
     runs-on: ubuntu-latest
     container:
       image: gitea/runner-images:ubuntu-latest
@@ -77,4 +80,5 @@ jobs:
           if [ -f vault.pid ]; then
             kill $(cat vault.pid) 2>/dev/null || true
             rm -f vault.pid
-          fi
+          fi
+