This repository was archived by the owner on Oct 10, 2023. It is now read-only.
This repository was archived by the owner on Oct 10, 2023. It is now read-only.
Migrate to gosec #160
Description
Which area this feature is related to?
/area ci
Issue details
Currently, alizer uses Snyk to check for vulnerabilities in the dependencies. Migrating to use gosec and dependabot will ensure dependencies are regularly updated as well as ensuring good security in the current go source code. This also keeps it consistent with how devfile source repositories are checked.
[UPDATE] @thepetk
This issue will be focusing on gosec and we have created a separate issue for dependabot ( #180 )