openebs-archive/openebsctl

Add vulerability scanning for Golang Dependencies via GitHub actions

开放

#151 创建于 2022年3月5日

 (0 条评论) (0 个反应) (0 位负责人)Go (22 个派生)auto 404
CISODALOWgood first issuesodacode2022

仓库指标

星标
 (33 个星标)
PR 合并指标
 (30 天内没有已合并 PR)

描述

It's said that one cannot build a great building on a week foundation, well the same applies for writing software, it's turtles all the way down to the zeros and ones & turtles down even below that.

Evaluate tools which can share details

  • about code & dependency vulnerabilities(Synk does it nicely per my knowledge)
  • good-to-upgrade dependencies(DependaBot does it nicely per my knowledge, i believe this is already included via GitHub w/o configuration these days)

put your findings in the comments and raise a PR for it

PS: I'll create a relevant secret token with a specific environment key after a PR is raised and add that app to this repository, do reach out to us @ https://slack.k8s.io #openebs-dev & #openebs for further queries

贡献者指南