Fix Sarif format of gosec output

arnested · Sep 18, 2024 · 2514f70 · 2514f70
1 parent fd9d948
commit 2514f70
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -25,6 +25,8 @@ jobs:
         uses: securego/gosec@v2.21.3
         with:
           args: '-no-fail -fmt sarif -out results.sarif -tests ./...'
+      - name: Fix SARIF format
+        run: yq --inplace --output-format json 'del(.runs.[].results.[].fixes)' results.sarif
       - name: Upload SARIF file
         uses: github/codeql-action/upload-sarif@v3
         with:
@@ -42,7 +44,6 @@ jobs:
       - id: govulncheck
         uses: golang/govulncheck-action@v1.0.3
         with:
-          govulncheck-action: go.mod
           output-format: sarif
           output-file: results.sarif
       - name: Fix SARIF format