Update github actions for gosec

.github/workflows/actions.yaml

@@ -18,15 +18,21 @@ jobs:
   go_security_scan:
     name: Run gosec
     runs-on: ubuntu-latest
+    env:
+      GO111MODULE: on
     steps:
       - name: Checkout the code
         uses: actions/checkout@v2
       - name: Run gosec to check for security vulnerabilities
         uses: dell/common-github-actions/gosec-runner@main
         with:
           directories: "./..."
-          excludes: "G108,G402"
           exclude-dir: "csireverseproxy"
+  proxy_go_security_scan:
+     name: Run gosec on reverseproxy
+     runs-on: ubuntu-latest  
+     steps:
+       - run: make proxygosec
   malware_security_scan:
     name: Malware Scanner
     runs-on: ubuntu-latest

Makefile

@@ -84,6 +84,15 @@ else
 endif
 	@echo "Logs are stored at gosec.log, Outputfile at gosecresults.csv"
 
+proxygosec:
+ifeq (, $(shell which gosec))
+	go install github.com/securego/gosec/v2/cmd/gosec@latest
+	$(shell cd csireverseproxy ; $(GOBIN)/gosec -quiet -log gosec.log -out=gosecresults.csv -fmt=csv ./...)
+else
+	$(shell  cd csireverseproxy ; gosec -quiet -log gosec.log -out=gosecresults.csv -fmt=csv ./...)
+endif
+	@echo "Logs are stored at gosec.log, Outputfile at gosecresults.csv"
+
 golint:
 ifeq (, $(shell which golint))
 	@{ \

csireverseproxy/Makefile

@@ -39,3 +39,5 @@ docker-push: docker-build
 unit-test:
 	go test -v -coverprofile c.out -coverpkg $(coverpackages) ./...
 
+gosec:
+	gosec ./...