👷 [skip ci] gosec code scanner

.github/workflows/dashboard.yml

@@ -11,6 +11,7 @@ on:
       - "*.md"
       - ".*"
       - ".github/workflows/agent.yml"
+      - ".github/workflows/gosec.yml"
 
 jobs:
   deploy:
@@ -38,11 +39,6 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v1
 
-      - name: Code Test
-        run: |
-          go env
-          go test -v ./...
-      
       - name: Set up image name
         run: |
           GHRC_IMAGE_NAME=$(echo "ghcr.io/${{ github.repository_owner }}/nezha-dashboard" | tr '[:upper:]' '[:lower:]')

.github/workflows/test.yml

@@ -0,0 +1,22 @@
+name: Run Test
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    env:
+      GO111MODULE: on
+    steps:
+      - uses: actions/checkout@v2
+      - name: Unit test
+        run: |
+          go test -v ./...
+      - name: Run Gosec Security Scanner
+        uses: securego/gosec@master
+        with:
+          args: ./...