name: Run Gosec
on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  tests:
    runs-on: ubuntu-latest
    container:
      image: gitea/runner-images:ubuntu-latest

    steps:
      - name: Checkout Source
        uses: actions/checkout@v3

      - name: Prepare reports
        run: mkdir -p reports

      - name: Run Gosec Security Scanner
        uses: securego/gosec@master
        with:
          args: -fmt=json -out=reports/results.json -stdout -verbose=text ./...

      - uses: actions/upload-artifact@v4
        with:
          name: gsec-results.json
          path: reports/results.json