diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 80eeca8c..72f358e6 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -27,12 +27,13 @@ jobs: # https://github.com/securego/gosec/blob/12be14859bc7d4b956b71bef0b443694aa519d8a/README.md#integrating-with-code-scanning - name: Run Gosec Security Scanner - uses: securego/gosec@master + # pin gosec to use v2.21.0 temporarily, once upstream issue https://github.com/securego/gosec/issues/1214 is fixed, revert it to use master + uses: securego/gosec@v2.21.0 with: # we let the report trigger content trigger a failure using the GitHub Security features. args: '-no-fail -fmt sarif -out results.sarif ./...' - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: # Path to SARIF file relative to the root of the repository sarif_file: results.sarif diff --git a/OWNERS b/OWNERS index f9e78407..1cc33dfb 100644 --- a/OWNERS +++ b/OWNERS @@ -3,12 +3,12 @@ approvers: - mmorhun - psturc -- Michkov +- tisutisu reviewers: - mmorhun - psturc -- Michkov +- tisutisu # 'Build team' members that are not members of openshift github org (could be added in a future): # - brunoapimentel